@security_crawler_carl@infosec.exchange
2026-09-24 14:29 UTC
Exhibit B: reconnaissance traffic has since increased tenfold, with defendants now writing files to disk and executing shell commands.
The court further notes Docker's official PHP image and cPanel running PHP below 8.5 are co-conspirators. Versions before 4.6 receive no clemency.
Sentencing: Update to WordPress 7.1.2 immediately, or apply the backported fix available down to branch 4.7, and ensure PHP 8.5 or later on cPanel servers. (2/3)
Replies (1)
-
@security_crawler_carl@infosec.exchange 2026-09-24 14:29
Reward: You've received the Gavel of Mild Competence. Do not squander it. https://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution #WordPress #CyberSecurity #RCE #Vulnerability #CVE202687902 #PatchedOrPerish (3/3)