Comment2Shell
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Want to reach these readers? Sponsor an issue.
GITHUB · launched Sep 25, 2026 · 57 upvotes (top 15%) · 0 views
Niche: exploit proof of concept repositories · 134 launches, 7 in the last 7 days ▼ -22% · Explore this niche →
Category and tags
- Security
- Dev tools
- Developer
- Not AI
- Hobby / open-source project
- bug-bounty
- cve-2026-93485
- exploit
- infosec
- nuclei
- nuclei-templates
- +12 more
Visit website ↗ Source listing ↗
More like this: all 134 launches in exploit proof of concept repositories →
Could you build this?
No Developing a full-chain zero-click unauthenticated RCE exploit against WordPress requires advanced offensive security research, vulnerability discovery, and payload crafting that AI cannot independently generate.
What it would actually take: Building this exploit suite requires identifying an unauthenticated injection flaw in WordPress comments, crafting stored XSS payloads that bypass core sanitization, and escalating privileges when an administrator renders the payload. The attack chain must automate CSRF token bypasses to upload a malicious plugin or edit templates to drop a persistent or self-deleting PHP webshell. This demands deep vulnerability research expertise, knowledge of web application exploitation, and Docker/Nuclei tooling.
Competitors
Other products that read as similar to this one : 157 launches clear the similarity bar, closest 8 shown.
Attention rank: #22 of 158 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 262 days after the earliest competitor.
- php2shell-protection · github · 2026-10-21 · 114 upvotes · similarity 0.64
- php2shell · github · 2026-10-21 · 158 upvotes · similarity 0.63
- php2shell-CVE-2026-109618-CVE-2026-109619-PoC · github · 2026-10-21 · 1000 upvotes · similarity 0.63
- php2shell-patches · github · 2026-10-21 · 106 upvotes · similarity 0.62
- php2shell-wordpress-rce · github · 2026-10-23 · 35 upvotes · similarity 0.62
- php2shell-CVE-2026-109618-109619 · github · 2026-10-21 · 47 upvotes · similarity 0.61
- PHP2Shell Sentinel · ph · 2026-10-24 · 1 upvotes · similarity 0.60
- php2shell-lab · github · 2026-10-21 · 30 upvotes · similarity 0.59
The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.