How to check and fix wp2shell in WordPress (CVE-2026-60137 and CVE-2026-63030)

The exact affected WordPress versions, what updating does and does not prove, which compromise indicators deserve investigation, and how Respira 8.1 turns a fleet scan into an approval-gated fix and verification receipt.