Use cases
Software Products E-commerce MSPs Schools Development & Marketing DevOps Agencies Help Desk
Company
Internet Status Blog Pricing Log in Get started free

Outage in IONOS

Important: Wordpress security vulnerability

Minor
July 20, 2026 - Started 4 days ago
Official incident page

Incident Report

On July 17, the "wp2shell" security vulnerability became known in the popular CMS WordPress. This vulnerability potentially allows attackers to inject malicious code into affected web spaces. WordPress versions 6.8 and newer are affected. The WordPress team has released new packages—versions 6.8.6, 6.9.5, 7.0.2, and 7.1 beta 2—in which the security vulnerability has been fixed. Customers using Managed WordPress from IONOS do not need to take any action. We are applying the necessary patches automatically. We strongly recommend that all users running a self-hosted WordPress on their web space update their installation to a current version. Further information regarding the security vulnerability can be found at https://www.bleepingcomputer.com/news/security/wordpress-core-wp2shell-rce-flaws-get-public-exploits-patch-now/

Trusted by 1,000+ teams

The Status Page Aggregator with Early Outage Detection

Stop finding out about outages from your users. Monitor 6,320+ cloud services and get alerted the second something breaks.

IsDown status aggregator dashboard
Latest Updates ( sorted recent to last )
MONITORING 3 days ago - at 07/21/2026 12:34PM

We are continuing to monitor for any further issues.

MONITORING 3 days ago - at 07/21/2026 12:32PM

We are continuing to monitor for any further issues.

MONITORING 4 days ago - at 07/20/2026 05:21PM

On July 17, the "wp2shell" security vulnerability became known in the popular CMS WordPress. This vulnerability potentially allows attackers to inject malicious code into affected web spaces.

WordPress versions 6.8 and newer are affected. The WordPress team has released new packages—versions 6.8.6, 6.9.5, 7.0.2, and 7.1 beta 2—in which the security vulnerability has been fixed.

Customers using Managed WordPress from IONOS do not need to take any action. We are applying the necessary patches automatically.
We strongly recommend that all users running a self-hosted WordPress on their web space update their installation to a current version.
Further information regarding the security vulnerability can be found at https://www.bleepingcomputer.com/news/security/wordpress-core-wp2shell-rce-flaws-get-public-exploits-patch-now/

The Status Page Aggregator with Early Outage Detection

With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.

Start free trial

No credit card required · Cancel anytime · 6320 services available

Integrations with Slack Microsoft Teams Google Chat Datadog PagerDuty Zapier Discord Webhook