Thread

WordPress: Unauthenticated path traversal leading to conditional RCE

240 points · 132 comments · vntok

system2 · 1790096284 · focus · HN ↗
pearcmd.php must exist, and register_argc_argv must be on, not common with hosting providers. But I am assuming the other themes and meeting conditions possibly affect a lot of WordPress sites.
1. dofm · 1790097375 · focus · HN ↗
  As the article points out, one issue is that the official Docker container for PHP has this configuration.
  However at least in principle all of the affected versions [0] could be automatically updated. Not sure if they have set it to auto-update as far back as 4.7 though.
  [0] except 4.9.3 which has a bug in its automatic update mechanism.

Unofficial Hacker News client; not affiliated with Y Combinator.