Hacker News Clone

Merry Christmas, now go patch your Wordpress installation

by zx2c4 on 12/24/2012, 8:22 AM with 2 comments

by zx2c4 on 12/24/2012, 8:23 AM
Exploit: http://git.zx2c4.com/w3-total-fail/tree/w3-total-fail.sh
Screencast: http://git.zx2c4.com/w3-total-fail/plain/screencast.ogv
by groobque on 12/24/2012, 8:28 AM
I can confirm the issue. My install was vulnerable. If you don't want to disable W3, then just add
```
  deny from all
```
In wp-content/w3tc/dbcache/.htaccess.