wp2shell: more than a month later. Confirm 6.8.6, 6.9.5, 7.0.2. Patched is not clean.

Read the advisory

Troubleshooting

Reinstall WordPress core

Reinstall WordPress from Dashboard → Updates to replace core files after a hack or accidental edits.

Reinstalling WordPress core replaces core files without wiping your content or settings. It is useful after malware that touched core files, or when core files were edited by hand.

  1. Take a backup first.
  2. Go to Dashboard → Updates.
  3. Click Re-install WordPress (wording may vary slightly by version).

Re-install WordPress

Custom changes inside WordPress core files will be lost. Theme/plugin customizations are not removed by a core reinstall, but anything edited under wp-admin / wp-includes / root core PHP will be overwritten.

Also run the Core Scanner afterward to confirm core files match official checksums.

Still stuck? Get help or contact us.

Larger screenshot