DeathShotXD / Comment2Shell
git clone https://github.com/DeathShotXD/Comment2Shell.git
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
—
stars, 24h
—
stars, 7 days
+64
stars, 30 days · #4,095
64
★ total
15
forks · 0 open issues
Star history starts 2026-10-20; the chart appears after the second daily snapshot.
LanguagePython
License—
Created2026-09-25 (26d ago)
Last push14d ago
OwnerUser
GitHub topics
bug-bountycve-2026-93485exploitinfosecnucleinuclei-templatespocpre-authrcesecurity-researchweb-application-securityweb-exploitationwebappsecwebshellwordpressxsszero-clickzeroday