# Boreas37/CVE-2026-64638-PoC-XSS2Shell-

<https://repo.masters-masters.com/en/repos/Boreas37/CVE-2026-64638-PoC-XSS2Shell->

[Home](https://repo.masters-masters.com/en) › [Boreas37](https://repo.masters-masters.com/en/owners/Boreas37) › [CVE-2026-64638-PoC-XSS2Shell-](https://repo.masters-masters.com/en/repos/Boreas37/CVE-2026-64638-PoC-XSS2Shell-)

Boreas37/CVE-2026-64638-PoC-XSS2Shell- has 130 stars on GitHub. Its RepoMasters card: Prototype tier. XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE…

| Field | Value |
| --- | --- |
| Owner | [Boreas37](https://repo.masters-masters.com/en/owners/Boreas37) |
| Stars | 130 |
| Forks | 31 |
| Language | [Python](https://repo.masters-masters.com/en/languages/python) |
| License | None |
| Created | 2026 |
| Tier | [Prototype (100 to 249 ★)](https://repo.masters-masters.com/en/ranks/rush) |
| View on GitHub | [Boreas37/CVE-2026-64638-PoC-XSS2Shell-](https://github.com/Boreas37/CVE-2026-64638-PoC-XSS2Shell-) |

## Repository

XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template

The tier for repos with 100 to 249 ★. Published odds per card pulled: 70%. Rarity: Common.

## Nearby in Python

- [salikhussain71-code/PAKGOV-RAG-project · ★ 130 · Python · Prototype](https://repo.masters-masters.com/en/repos/salikhussain71-code/PAKGOV-RAG-project)
- [ABC12345anouys/EvoBot · ★ 130 · Python · Prototype](https://repo.masters-masters.com/en/repos/ABC12345anouys/EvoBot)
- [dominik-schnaus/unpaired-rosetta · ★ 130 · Python · Prototype](https://repo.masters-masters.com/en/repos/dominik-schnaus/unpaired-rosetta)
- [textmate/markdown.tmbundle · ★ 130 · Python · Prototype](https://repo.masters-masters.com/en/repos/textmate/markdown.tmbundle)
- [bububa/MongoHub · ★ 130 · Python · Prototype](https://repo.masters-masters.com/en/repos/bububa/MongoHub)
- [ioerror/blockfinder · ★ 130 · Python · Prototype](https://repo.masters-masters.com/en/repos/ioerror/blockfinder)

---
Data: GitHub · Illustration drawn by RepoMasters from the repo’s ID and its language color.