Research

Technical write-ups from the CyberTested research team: vulnerability chains, Core bugs, and the lessons they teach about how severity really works.

XSS2Shell: From Zero to Shell on WordPress

XSS2Shell: From Zero to Shell on WordPress

A hands-on walkthrough of a pre-authentication XSS chain that can escalate to remote code execution on WordPress Core, demonstrated on a local Docker lab.

August 20, 2026 5 min read

Search papers

Select Region & Language

Region
Language
Want to see CyberTested in action?
Book a Free Demo