SecurityLobstersabout 2 hours ago
Researchers Leak PHP Remote Code Execution
13 min read
Security researchers from Calif Research leaked a remote code execution vulnerability in PHP versions 5.4.0 through 8.1. The exploit targets specific web applications including WordPress 7.1.2, Drupal 11.4.3, and Joomla 6.1.4 by abusing memory limits and request shutdown sequences to leave dangling pointers. The team confirmed pre-auth RCE on these platforms under default configurations, affecting millions of sites globally.
Level
Hype check
Tap to vote and see what everyone thinks.
