PHP Everywhere Bugs Put 30K+ WordPress Sites at Risk of RCE
-
The plug-in’s default settings spawned flaws that could allow for full site takeover but have since been fixed in an update that users should immediately install, Wordfence researchers said.
https://threatpost.com/php-everywhere-bugs-wordpress-rce/178338/