Hosts vulnerable to CVE-2026-63030
CVE-2026-63030 — severity critical, CVSS 9.8 — 10 affected hosts indexed by QROS Explore.
About CVE-2026-63030
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.
Showing 10 of 10 hosts, ranked by risk score.
1630865.cloudwaysapps.com (24.199.102.119)
United States · Santa Clara
3 open ports · 23 CVE · risk 98/100 · critical
http, ssh
www.akselipalen.com (37.139.21.211)
The Netherlands · Amsterdam
3 open ports · 31 CVE · risk 98/100 · critical
http, ssh
tvmaxsa.com.py (45.55.133.200)
United States · Clifton
3 open ports · 91 CVE · risk 98/100 · critical
http, ssh
24.144.86.224
United States · Santa Clara
2 open ports · 67 CVE · risk 98/100 · critical
http, ssh
fafa123a.org (45.55.247.57)
United States · Clifton
3 open ports · 19 CVE · risk 98/100 · critical
http, ssh
act.vikkigoodwin.com (45.55.101.216)
United States · Secaucus
3 open ports · 23 CVE · risk 98/100 · critical
http, ssh
587231.cloudwaysapps.com (46.101.94.67)
United Kingdom · Kingston upon Thames
3 open ports · 29 CVE · risk 98/100 · critical
http, ssh
bowmanandpoole.com (46.101.23.118)
United Kingdom · Slough
3 open ports · 23 CVE · risk 98/100 · critical
http, ssh
burnzine.com (45.55.91.193)
United States · Clifton
3 open ports · 23 CVE · risk 98/100 · critical
http, ssh
ezcarrierusa.com (45.55.249.205)
United States · Clifton
3 open ports · 23 CVE · risk 98/100 · critical
http, ssh
Search all CVE-2026-63030 hosts in Explore
Open in Explore →