wp2shell: WordPress Left the Batch Door Open. Your WAF Can Close It.
A cross-vendor emergency WAF rule pack for WordPress CVE-2026-63030 and CVE-2026-60137, covering Cloudflare, AWS WAF, F5 Distributed Cloud, Fastly, Akamai, Azure, and Google Cloud Armor.