WP‑Shellstorm Exposed: 1.4 M WordPress Targets and 5,700 Active Webshells
An open server left by a Chinese‑linked cybercrime group leaked 800 MB of tools, logs and a target list of over 1.4 million WordPress sites. Analysis shows more than 5,700 live webshell backdoors and weaponization of 27 CVEs, confirming WP‑Shellstorm as a large‑scale access‑brokerage operation. Researchers warn the compromised sites are now at risk of resale and further attacks.