WordPress Exploited Instantly, Again

A critical WordPress bug was exploited hours after disclosure because of course it was. Why do we even bother pretending anyone patches fast enough?

Source: SecurityWeek

The Full Story

Severity: Critical Mood: Frustrating

Here we go again with WordPress installations hosting themes like Twenty Twelve, Neve, or Sydney, practically gifting unauthenticated remote execution to opportunists via pearcmd.php. The critical path traversal vulnerability was weaponised mere hours post-disclosure, naturally. Shielding ourselves requires securing those specific server configurations and page-template setups before attackers finish laughing. Just another Tuesday where patching races are lost before breakfast.

#WordPressFail #WhyDoWeBother

Open article →