Skip to content
Signalcrest
Back to feed
githubsecurity

wp2shell-PoC — CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept

Proof-of-concept demonstrates RCE chain using CVE-2026-63030 and CVE-2026-60137 in wp2shell.

Steady
Signal score
16
Trajectory
Cooling
7-day est. ~0

Why this scored 16

every term, weighted
Velocity+0.0 / 40

Engagement gained per hour since the last capture, against the fastest item on its own source

Acceleration+11.2 / 25

Whether that velocity is itself speeding up, as a per-hour rate

Cross-source spread+0.0 / 25

How many independent communities are talking about the same entity

Recency+8.1 / 10

Decays to zero over 14 days

Saturation penalty3.1 / 30

Subtracted once something is big and old — we rank what's next, not what's peaked

Composite16.2

Weights are hand-tuned, not learned — we're calibrating them against realized trends as history accumulates. On a topic's first sighting there's no previous reading to compare against, so acceleration starts from a neutral prior rather than a measurement, and velocity falls back to engagement over its whole lifetime until a second reading exists. Full methodology

Outlook

low confidence · estimate, not a guarantee

7-day

~0

range 012

14-day

~0

range 014

30-day

~0

range 019

Signal history

7-day window (free)
037

projected trajectory (estimate, not a guarantee)

Entities

wp2shell
Embed a live signal badge
Signalcrest signal badge
[![Signalcrest signal](https://www.signalcrest.app/api/badge/gh%3A1376146826)](https://www.signalcrest.app/topic/gh%3A1376146826)

Drop this in a README or blog post — it updates automatically as the score moves.