If you're running Wordpress or ANYTHING that uses PHP, there are two critical vulnerabilities with exploits in the wild right now.
You should ensure that you're not using anything outside of what's recommended in the PHP advisory I mentioned above. New (fixed) versions of PHP were released today, so those can be applied as fixes.
In my case, I'm running a containerized Wordpress. I waited all day for the Docker images to be released that fixes the issues. I'm using Alpine images and thought that I could just install Alpine PHP packages, but the Docker images were available before the new Alpine PHP packages were released. My site is repaired of those two particular vulnerabilities.
We'll see how many websites get compromised over the next few months because folks ignored the warnings.
No comments:
Post a Comment