alt Hacker NewsI’m not especially technical, but I have clients with WordPress websites. Can anyone perhaps put in a sentence or two what I need to suggest they do?
Replies
qwm • today at 4:08 PM
Shut the sites down until you are able to update to the latest PHP patch for your version.
smurf9852 • today at 4:07 PM
You need to update the PHP version, which is usually done by the hosting provider.
➕ show 1 reply
Tell them to take anything with PHP offline, so that it isn't available from the public internet. That is how Netcup and Contabo are handling Wordpress hosting until they've upgraded all affected packages.
There are already functional exploit scripts on GitHub, you can target any Wordpress site right now.