#xss2shell

Live, measured metrics for the hashtag #xss2shell from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.

hashtag.org network · sponsored

Own #xss2shell

This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.

$51.02/ year · 9-character #name
Claim #xss2shell — $51.02/yr→Buy on hashtag.space (web3)
card via hashtag.org · tokens via hashtag.space
0
Uses / 7 days
Mastodon
0
Accounts / 7 days
Mastodon
13
Recent posts
Mastodon
~0/hr
Recent pace
Mastodon · last 13
0
Avg reactions / post
Mastodon · last 13
—
Reddit posts / month
Reddit search
—
Open-web mentions
hashtag.org Firehose

Day-by-day usage

measured · mas.to (Mastodon public tags API) · fetched 2026-11-09 03:54 UTC
0
11-03
0
11-04
0
11-05
0
11-06
0
11-07
0
11-08
0
11-09

0 uses by 0 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.

Related hashtags

measured · mas.to (Mastodon public search API) · fetched 2026-11-09 03:54 UTC

No related tags with measured usage found for #xss2shell.

Live pulse

measured · mas.to (Mastodon tag timeline) · fetched 2026-11-09 03:54 UTC

Everything below is measured over the latest 13 public posts (spanning ~1830 hours).

Posting hours (UTC) — busiest: 15:00

00:0012:0023:00

Languages: English (7) · Polish (2) · Portuguese (1) · German (1) · French (1) · Italian (1)

Avg boosts / post: 1.4

Top of the latest posts

  • Malta do WordPress: atualizem! 🚨 Ainda nem curaram a ressaca do PHP2Shell e já temos XSS2Shell. Podem dar descanso esta semana? 🫨 https://tugatech.com.pt/t93166-vulnerabilidade-xss2shell-no-wordpress-permite-execucao-de-codigo #XSS2Shell

    Pedro Fernandes 👨‍💻@DJPRMF@mastodon.social♥ 0↻ 02026-10-22 21:47 UTCView post →

  • Der Name der Lücke #XSS2Shell kommt mir irgendwie bekannt vor. Gab es einmal eine ähnlich klingende Lücke? #WordPress-Lücke: Login-Seite öffnet Tür zur Serverübernahme | Security https://www.heise.de/news/WordPress-Luecke-Login-Seite-oeffne

    Marcel SIneM(S)US@simsus@social.tchncs.de♥ 0↻ 12026-08-14 06:22 UTCView post →

  • Less than a week after the #XSS2Shell patch, #WordPress has another critical security release. But at least it requires authentication and permissions this time. (You did check accounts after the last RCE patch, right?) * Authenticated Auth

    Rachel Rawlings@linuxandyarn@hachyderm.io♥ 0↻ 02026-08-12 15:53 UTCView post →

#xss2shell across platforms

every network with a public tag surface

Follow #xss2shell straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.

X (Twitter) ↗Instagram ↗TikTok ↗Facebook ↗LinkedIn ↗YouTube ↗Threads ↗Bluesky ↗Mastodon ↗Reddit ↗Pinterest ↗Tumblr ↗

Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/xss2shell