Comment by nightbun
17 hours ago
I can almost confirm a Wordpress site I manage was attacked with this. Oct 5th updated it to latest php and Wordpress. Oct 6th it was exploited with a web shell exploit
17 hours ago
I can almost confirm a Wordpress site I manage was attacked with this. Oct 5th updated it to latest php and Wordpress. Oct 6th it was exploited with a web shell exploit
On the other hand: it is Wordpress, who knows how many other exploits could be hiding among the dozens of plugins it likely has installed?
this is not a web shell exploit. This goes to container shell level. Very different scenarios.
What ultimately ended up happening?
Yeh this isn't that.