Sysop Solutions Security Advisory
Security vulnerabilities have been identified in WordPress that could potentially allow attackers to perform SQL injection and remote code execution against affected websites.
The vulnerabilities are tracked as:
Successful exploitation could allow an attacker to inject malicious SQL queries and potentially execute arbitrary code remotely on an affected WordPress website.
| CVE-2026-63030 | WordPress security vulnerability |
| CVE-2026-60137 | WordPress security vulnerability |
| Potential Impact | SQL Injection & Remote Code Execution |
| Recommended Fix | Update WordPress to 7.0.2 or later |
We strongly recommend updating all WordPress installations to the latest available version as soon as possible.
The security release identified by cPanel is WordPress 7.0.2.
If a newer WordPress release is available, we recommend using the latest stable version rather than remaining on an older release.
cPanel identifies several security solutions that can provide protection against these vulnerabilities, including:
These protections should be considered an additional security layer. Keeping WordPress fully patched remains the recommended solution.
If an immediate WordPress update is not possible, cPanel documents temporary mitigation options, including blocking the following WordPress REST API endpoint:
and requests using:
Note: These emergency measures may affect legitimate website functionality and should only be used temporarily until WordPress can be updated.
If your website or server is managed by Sysop Solutions, our team can assist with reviewing affected WordPress installations and applying the necessary security updates.
Customers managing their own WordPress websites should verify their WordPress version and apply the available security update immediately.
If you are unsure whether your website is affected or need assistance securing or updating WordPress, please contact Sysop Solutions Support.
For complete technical details and the latest security information, please refer to the official cPanel advisory:
Sysop Solutions recommends keeping WordPress, plugins, themes, and server security software up to date.
Regards,
Sysop Solutions
Hosting & Server Management