Thread

WordPress: Unauthenticated path traversal leading to conditional RCE

240 points · 132 comments · vntok

zelphirkalt · 1790100372 · focus · HN ↗
These are the reason, why every easily reachable web server will be spammed with /something/something.php?somearg=someval. If I had to guess, which software on the web has been the most exploitable over all of the web's history, WP would surely be among the top candidates. Maybe right after MS Teams or Sharepoint or some stuff like that.
1. ErroneousBosh · 1790203556 · focus · HN ↗
  Every so often I switch on the nginx endpoint that serves a 10TB zipbomb to clients that request anything `wp-*` that 404s (which is everything on my sites, I don't run WordPress).
  Sometimes the same IP address hits two or three URLs before going dead.
  Sure is quiet around here at night.

Unofficial Hacker News client; not affiliated with Y Combinator.