{"id":13916,"date":"2026-08-05T13:48:37","date_gmt":"2026-08-05T11:48:37","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?p=13916"},"modified":"2026-08-05T14:51:27","modified_gmt":"2026-08-05T12:51:27","slug":"vulnerabilidad-critica-wordpress-wp2shell","status":"publish","type":"post","link":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/","title":{"rendered":"Vulnerabilidad cr\u00edtica en WordPress (wp2shell): actualizaci\u00f3n urgente"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"13916\" class=\"elementor elementor-13916\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-296bd3fa elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"296bd3fa\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-f1774d4\" data-id=\"f1774d4\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-436b7c35 elementor-widget elementor-widget-shortcode\" data-id=\"436b7c35\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><span style=\"color: #c02b23;font-weight: bold\">Cr&iacute;tica <\/span><img loading=\"lazy\" decoding=\"async\" width=\"10\" height=\"10\" src=\"https:\/\/www.infordisa.com\/soc\/imgs\/alerta-5.png\" alt=\"Alerta 5\"\/><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6a912500 elementor-widget elementor-widget-text-editor\" data-id=\"6a912500\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div><strong><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-63030\" target=\"_blank\" rel=\"noopener\">CVE-2026-63030<\/a><\/strong><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4a46abf2 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"4a46abf2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bb517c4 elementor-toc--content-ellipsis elementor-toc--minimized-on-mobile elementor-widget elementor-widget-table-of-contents\" data-id=\"bb517c4\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings='{\"headings_by_tags\":[\"h2\"],\"exclude_headings_by_selector\":[],\"marker_view\":\"bullets\",\"icon\":{\"value\":\"fas fa-chevron-right\",\"library\":\"fa-solid\"},\"no_headings_message\":\"No se ha encontrado ning\\u00fan encabezado en esta p\\u00e1gina.\",\"minimized_on\":\"mobile\",\"minimize_box\":\"yes\",\"hierarchical_view\":\"yes\",\"min_height\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"min_height_tablet\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"min_height_mobile\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]}}' data-widget_type=\"table-of-contents.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t\t\t\t<h4 class=\"elementor-toc__header-title\">\n\t\t\t\tTabla de contenidos\t\t\t<\/h4>\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--expand\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__bb517c4\" aria-expanded=\"true\" aria-label=\"Abrir la tabla de contenidos\"><i aria-hidden=\"true\" class=\"fas fa-chevron-down\"><\/i><\/div>\n\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--collapse\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__bb517c4\" aria-expanded=\"true\" aria-label=\"Cerrar la tabla de contenidos\"><i aria-hidden=\"true\" class=\"fas fa-chevron-up\"><\/i><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<div id=\"elementor-toc__bb517c4\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<i class=\"elementor-toc__spinner eicon-animation-spin eicon-loading\" aria-hidden=\"true\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-038fdd5 elementor-widget elementor-widget-text-editor\" data-id=\"038fdd5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>La mayor&iacute;a de los problemas de seguridad que vemos en WordPress vienen de afuera del n&uacute;cleo: un plugin abandonado, un tema descargado de un sitio pirata, una contrase&ntilde;a reutilizada. Esta vez es distinto. La <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/vulnerabilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">vulnerabilidad<\/a> est&aacute; en el coraz&oacute;n de WordPress mismo, en un componente que trae toda instalaci&oacute;n por defecto.<\/p><p>Se ha detectado una vulnerabilidad cr&iacute;tica (CVSS 9,8 sobre 10) en el n&uacute;cleo de WordPress, identificada como <strong><a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/cve\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>CVE<\/a>-2026-63030<\/strong> y conocida como &laquo;<strong>wp2shell<\/strong>&laquo;. El fallo permite a un atacante ejecutar c&oacute;digo de forma remota en el <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/servidor\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>servidor<\/a> sin necesidad de estar autenticado ni de ninguna interacci&oacute;n por parte de la v&iacute;ctima, y ya est&aacute; siendo explotado activamente en internet.<\/p><h2>&iquest;Qu&eacute; ocurre a nivel t&eacute;cnico?<\/h2><p>wp2shell combina dos fallos encadenados. El primero es un error de l&oacute;gica en el endpoint de procesamiento por lotes de la API REST de WordPress (\/wp-json\/batch\/v1), que valida y ejecuta las peticiones en bucles separados y provoca una desincronizaci&oacute;n entre ellas. El segundo es una <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/inyeccion-sql\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">inyecci&oacute;n SQL<\/a> en el par&aacute;metro author__not_in.<\/p><p>Combinando ambos fallos, un atacante puede acabar ejecutando comandos arbitrarios en el servidor, es decir:<\/p><blockquote><p>Un atacante puede tomar el control completo del sitio web sin necesidad de credenciales.<\/p><\/blockquote><h2>&iquest;Por qu&eacute; es tan grave?<\/h2><p>La puntuaci&oacute;n CVSS de 9,8 refleja que se trata de un ataque que se ejecuta a trav&eacute;s de la red, sin privilegios previos ni interacci&oacute;n del usuario, y con impacto alto en <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/confidencialidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">confidencialidad<\/a>, <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/integridad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">integridad<\/a> y <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/disponibilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">disponibilidad<\/a>. En la pr&aacute;ctica, un atacante puede leer o modificar el contenido del sitio, instalar puertas traseras, robar datos de clientes o usar el servidor como punto de partida para nuevos ataques.<\/p><h2>Explotaci&oacute;n activa confirmada<\/h2><p><strong>La vulnerabilidad se public&oacute; a mediados de julio de 2026 y, en pocos d&iacute;as, se detectaron los primeros ataques reales<\/strong>. Poco despu&eacute;s fue incluida en el cat&aacute;logo de vulnerabilidades explotadas conocidas (KEV) de CISA. Desde entonces se observa una ola creciente de escaneos automatizados desde miles de direcciones IP distintas, dirigidos de forma oportunista a peque&ntilde;os negocios, tiendas online y empresas de tecnolog&iacute;a, sin distinci&oacute;n de tama&ntilde;o o sector.<\/p><h2>Versiones afectadas<\/h2><ul><li>WordPress 6.9.0 a 6.9.4 (corregido en la 6.9.5)<\/li><li>WordPress 7.0.0 y 7.0.1 (corregido en la 7.0.2)<\/li><\/ul><p>Las versiones anteriores a la 6.9.0 no se ven afectadas por este fallo concreto. Puedes comprobar si una instalaci&oacute;n es vulnerable con la herramienta p&uacute;blica <a href=\"https:\/\/wp2shell.com\/\" target=\"_blank\" rel=\"noopener\">wp2shell.com<\/a><\/p><h2>Buenas pr&aacute;cticas para mitigar y prevenir<\/h2><p>Actualiza WordPress a una versi&oacute;n ya parcheada (6.9.5 o 7.0.2) lo antes posible; es la &uacute;nica soluci&oacute;n definitiva. Si no puedes actualizar de inmediato, instala el plugin &laquo;Disable WP REST API&raquo; para impedir que usuarios no autenticados accedan a la API REST. Como medida temporal adicional, bloquea mediante un WAF la ruta \/wp-json\/batch\/v1 y las peticiones con el par&aacute;metro rest_route=\/batch\/v1. Revisa los logs en busca de actividad an&oacute;mala y realiza un inventario del estado de actualizaci&oacute;n de todos tus sitios WordPress.<\/p><h2>Mantenimiento web proactivo<\/h2><p>Este caso vuelve a dejar la misma ense&ntilde;anza de siempre: un WordPress sin actualizar es una puerta abierta. Cada versi&oacute;n sin parchear en producci&oacute;n es una oportunidad para ataques automatizados a gran escala, que no distinguen a qui&eacute;n comprometen. El mantenimiento proactivo &mdash;actualizaciones, monitorizaci&oacute;n, control de plugins&mdash; es tan importante como cualquier otra medida de seguridad.<\/p><blockquote><p>Una web segura es una web mantenida.<\/p><\/blockquote>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>wp2shell: <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/vulnerabilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">vulnerabilidad<\/a> cr&iacute;tica en WordPress (CVE-2026-63030) explotada activamente. Descubre si tu web est&aacute; afectada y c&oacute;mo protegerla.<\/p>\n","protected":false},"author":2,"featured_media":13920,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[39,4],"tags":[147,173],"class_list":["post-13916","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-actualidad","category-alertas-de-seguridad","tag-vulnerabilidad","tag-wordpress","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-25"],"acf":[],"yoast_head":"<title>Vulnerabilidad cr\u00edtica en WordPress (wp2shell): actualizaci\u00f3n urgente - Infordisa \/ Security Operations Center<\/title>\n<meta name=\"description\" content=\"wp2shell: vulnerabilidad cr\u00edtica en WordPress (CVE-2026-63030) explotada activamente. Descubre si tu web est\u00e1 afectada y c\u00f3mo protegerla.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidad cr\u00edtica en WordPress (wp2shell): actualizaci\u00f3n urgente - Infordisa \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"wp2shell: vulnerabilidad cr\u00edtica en WordPress (CVE-2026-63030) explotada activamente. Descubre si tu web est\u00e1 afectada y c\u00f3mo protegerla.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/\" \/>\n<meta property=\"og:site_name\" content=\"Infordisa \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-05T11:48:37+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-05T12:51:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/vulnerabilidad-wp2shell-Infordisa.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jordi Sala\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/vulnerabilidad-wp2shell-Infordisa.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@infordisa\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordi Sala\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/\"},\"author\":{\"name\":\"Jordi Sala\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\"},\"headline\":\"Vulnerabilidad cr\u00edtica en WordPress (wp2shell): actualizaci\u00f3n urgente\",\"datePublished\":\"2026-08-05T11:48:37+00:00\",\"dateModified\":\"2026-08-05T12:51:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/\"},\"wordCount\":600,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/vulnerabilidad-wp2shell.jpg\",\"keywords\":[\"Vulnerabilidad\",\"WordPress\"],\"articleSection\":[\"Actualidad\",\"Alertas de seguridad\"],\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/\",\"name\":\"Vulnerabilidad cr\u00edtica en WordPress (wp2shell): actualizaci\u00f3n urgente - Infordisa \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/vulnerabilidad-wp2shell.jpg\",\"datePublished\":\"2026-08-05T11:48:37+00:00\",\"dateModified\":\"2026-08-05T12:51:27+00:00\",\"description\":\"wp2shell: vulnerabilidad cr\u00edtica en WordPress (CVE-2026-63030) explotada activamente. Descubre si tu web est\u00e1 afectada y c\u00f3mo protegerla.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/vulnerabilidad-wp2shell.jpg\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/vulnerabilidad-wp2shell.jpg\",\"width\":1200,\"height\":630},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-critica-wordpress-wp2shell\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilidad cr\u00edtica en WordPress (wp2shell): actualizaci\u00f3n urgente\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"Infordisa \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"Infordisa \\\/ Security Operations Center\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"Infordisa \\\/ Security Operations Center\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\",\"name\":\"Jordi Sala\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"caption\":\"Jordi Sala\"},\"description\":\"Marketing\",\"sameAs\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"],\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/author\\\/jsala\\\/\"}]}<\/script>","yoast_head_json":{"title":"Vulnerabilidad cr\u00edtica en WordPress (wp2shell): actualizaci\u00f3n urgente - Infordisa \/ Security Operations Center","description":"wp2shell: vulnerabilidad cr\u00edtica en WordPress (CVE-2026-63030) explotada activamente. Descubre si tu web est\u00e1 afectada y c\u00f3mo protegerla.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/","og_locale":"es_ES","og_type":"article","og_title":"Vulnerabilidad cr\u00edtica en WordPress (wp2shell): actualizaci\u00f3n urgente - Infordisa \/ Security Operations Center","og_description":"wp2shell: vulnerabilidad cr\u00edtica en WordPress (CVE-2026-63030) explotada activamente. Descubre si tu web est\u00e1 afectada y c\u00f3mo protegerla.","og_url":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/","og_site_name":"Infordisa \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_published_time":"2026-08-05T11:48:37+00:00","article_modified_time":"2026-08-05T12:51:27+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/vulnerabilidad-wp2shell-Infordisa.jpg","type":"image\/jpeg"}],"author":"Jordi Sala","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/vulnerabilidad-wp2shell-Infordisa.jpg","twitter_creator":"@infordisa","twitter_site":"@infordisa","twitter_misc":{"Escrito por":"Jordi Sala","Tiempo de lectura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/#article","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/"},"author":{"name":"Jordi Sala","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375"},"headline":"Vulnerabilidad cr\u00edtica en WordPress (wp2shell): actualizaci\u00f3n urgente","datePublished":"2026-08-05T11:48:37+00:00","dateModified":"2026-08-05T12:51:27+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/"},"wordCount":600,"publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/vulnerabilidad-wp2shell.jpg","keywords":["Vulnerabilidad","WordPress"],"articleSection":["Actualidad","Alertas de seguridad"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/","url":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/","name":"Vulnerabilidad cr\u00edtica en WordPress (wp2shell): actualizaci\u00f3n urgente - Infordisa \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/#primaryimage"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/vulnerabilidad-wp2shell.jpg","datePublished":"2026-08-05T11:48:37+00:00","dateModified":"2026-08-05T12:51:27+00:00","description":"wp2shell: vulnerabilidad cr\u00edtica en WordPress (CVE-2026-63030) explotada activamente. Descubre si tu web est\u00e1 afectada y c\u00f3mo protegerla.","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/#primaryimage","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/vulnerabilidad-wp2shell.jpg","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/08\/vulnerabilidad-wp2shell.jpg","width":1200,"height":630},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-critica-wordpress-wp2shell\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilidad cr\u00edtica en WordPress (wp2shell): actualizaci\u00f3n urgente"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"Infordisa \/ Security Operations Center","description":"Portal de Ciberseguridad","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"Infordisa \/ Security Operations Center","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"Infordisa \/ Security Operations Center"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]},{"@type":"Person","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375","name":"Jordi Sala","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","caption":"Jordi Sala"},"description":"Marketing","sameAs":["https:\/\/www.infordisa.com\/soc\/"],"url":"https:\/\/www.infordisa.com\/soc\/author\/jsala\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/13916","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/comments?post=13916"}],"version-history":[{"count":14,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/13916\/revisions"}],"predecessor-version":[{"id":13938,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/13916\/revisions\/13938"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/media\/13920"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/media?parent=13916"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/categories?post=13916"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/tags?post=13916"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}