Exposed Server Exposes 25,000 Hacked WordPress Sites

An unsecured server belonging to the WP-SHELLSTORM campaign leaked tools, logs, and cloud credentials used to compromise over 25,000 WordPress websites. The server contained thousands of webshells enabling ongoing remote access. The breach highlights persistent vulnerabilities in WordPress security and the scale of automated hacking operations.