WordPress Wp2shell Exploitation Tool User-Agent — Detection Rule

Detects the hardcoded "wp2shell" User-Agent string used by the wp2shell PoC tool during all phases of CVE-2026-63030 and CVE-2026-60137 exploitation.

Read the full analysis on IntelFusions