Vendor reports: operationalResolved · vendor status “resolved”Official status API

Security Advisory: Critical WordPress Vulnerability - "Click2Shell"

Reported by Liquid Web · Hosting, CDN & Edge · source last read 2 min ago

Official source (opens in a new tab)
Vendor start
Sep 22, 2026, 20:13 UTC
Vendor's clock
Resolved
Oct 1, 2026, 18:29 UTC
Vendor's clock
First seen by Statuswall
Before tracking began
Statuswall's clock
Duration
8 d 22 h
From vendor start and resolution

Summary

Built from the facts below, no AI

Potential impact, not a confirmed outage of your systems.

What the vendor confirmed

  • Liquid Web reports operational: "Security Advisory: Critical WordPress Vulnerability - "Click2Shell"".[E1, E2]
  • The vendor marked it resolved at 2026-10-01 18:29 UTC.[E3, E7]

What is unknown

  • Which regions are affected: the vendor did not say.[E5]
  • Which components are affected: the vendor did not say.[E6]
  • Whether your own systems are affected: a vendor report cannot tell you; check your monitoring.

Last update in these facts: 2026-10-01 18:29 UTC · summary s1, evidence 91c8c5f33a0a2a93

Evidence (7)
  1. E1Liquid Web reports operational. (vendor) source (opens in a new tab)
  2. E2Vendor title: "Security Advisory: Critical WordPress Vulnerability - "Click2Shell"". (vendor) source (opens in a new tab)
  3. E3Vendor status word: "resolved". (vendor) source (opens in a new tab)
  4. E4Vendor-reported start: 2026-09-22 20:13 UTC. (vendor) source (opens in a new tab)
  5. E5The vendor did not state which regions are affected. (Statuswall)
  6. E6The vendor attached no components. (Statuswall)
  7. E7Vendor-reported resolution: 2026-10-01 18:29 UTC. (vendor) source (opens in a new tab)

Affected scope

Not stated by the vendor

Components: not stated by the vendor

No region Statuswall recognises is stated for this incident (place names and provider-specific codes are not converted). It is not assumed to be global.

Potential relevance

Liquid Web is not in your stack. Follow it to see whether reports like this fall inside the regions you use.

Timeline

Vendor times come from the vendor. “Seen by Statuswall” times are when Statuswall noticed a change, which can lag the vendor by a few minutes. Statuswall does not store the vendor's update text; read it on the official page.

  1. Sep 22, 2026, 20:13 UTCVendor-reported startVendor time
  2. Oct 1, 2026, 18:29 UTCVendor-reported resolutionVendor time

No changes observed yet. Statuswall began recording changes on incidents in November 2026.