Publicly released exploit code for the WordPress core wp2shell vulnerability is fueling widespread mass scanning and site takeover attempts.