Make WordPress Core

Opened 7 years ago

Closed 7 years ago

Last modified 7 years ago

#46810 closed defect (bug) (duplicate)

WordPress Attack Reaching wp_query parsing - Please Patch!

Reported by: dazamate Owned by:
Priority: normal Milestone:
Component: Query Version: 5.1
Severity: major Keywords:
Cc: Focuses:

Description

Hi team,

First time here posting an issue.

I posted my problem on stack overflow:

https://stackoverflow.com/questions/55528704/how-to-stop-this-wordpress-query-attack

Someone mentioned they are seeing this issue also and I should probably alert you guys.

I am not sure how to debug this any further, it seems like the attacks are doing some tricky url query to try get an array filled malicious code to be processed by the wp query engine.

Check out my stack overflow post, there is also a link to my debug trace file.

Let me know if you need me to put any other debug code to log more details.

Change History (2)

#1 @knutsp
7 years ago

  • Resolutionduplicate
  • Status newclosed

Duplicate of #17737.

Hello @dazamate

Welcome to Trac! There is already an issue tracking this.

#2 @Clorith
7 years ago

  • Keywords needs-patch removed
  • Milestone Awaiting Review
Note: See TracTickets for help on using tickets.