‹ BackHN Continuity

Thread

WordPress: Unauthenticated path traversal leading to conditional RCE

240 points · 132 comments · vntok

  1. thenthenthen · · focus · HN ↗
    Is there a simple quick fix for older wp installs? I dont want to go through 20 meetings and two weeks of discussions
    1. 0xbadcafebee · · focus · HN ↗
      1. Install the backported patch, or 2. Disable register_argc_argv in php.ini
      1. thenthenthen · · focus · HN ↗
        Thank you for the summary! I made some cash building wp sites back in the day, but in today’s internet, no one can really afford this.
        1. thenthenthen · · focus · HN ↗
          (Support never ends)
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.