pantheon-systems-ps

Use when auditing a Pantheon WordPress site for the wp2shell vulnerability chain (CVE-2026-60137 SQL injection + CVE-2026-63030 REST batch-confusion) — runs deterministic log/DB checks via scripts/wp2shell-audit.sh, reviews recently registered users for anomalies a fixed regex can't catch, and (only if asked) publishes a formatted Google Doc containing both.

Use after wp2shell-audit has confirmed a Pantheon WordPress site is compromised by the wp2shell vulnerability chain (CVE-2026-60137 / CVE-2026-63030) — guides remediation (upstream update on a multidev, fake-admin removal, optional password reset, salt rotation, DB cleanup) via scripts/wp2shell-cleanup.sh, in order, with a human decision point before every destructive or ambiguous action.