commitmentSaid on 2026-07-21
It should be checked that there are no new .php files in /wp-content/uploads/.
A commitment by turansecurity, said on 2026-07-21. Statements are as reported by the cited publishers — not verified by DecisionGateway.
/wp-content/uploads/ da yangi .php fayllar mavjud emasligini tekshirish kerak.
Discussion
Related claims
The site should be urgently updated to WordPress 7.0.2 or 6.9.5 version.turansecurity · commitmentWAF and REST API request logs should be checked.turansecurity · commitmentOrganizations should check their PHP versions and install updates as soon as they are released.Turan Security Xavfsizlik Byulleteni · statementTwo critical vulnerabilities have been confirmed in PHP, distributed under the name PHP2Shell, and they create a risk of remote malicious code execution on the server and unauthorized access to data.Turan Security Xavfsizlik Byulleteni · allegationThe vulnerability exists in WordPress 6.9.x (up to 6.9.5) and 7.0.x (up to 7.0.2) versions.turansecurity · statementThe system will check more than 300 million video frames for violations.TRT Haber · prediction
More claims by turansecurity
Red Hat Build of Keycloak users should apply RHSA-2026:56519 / 56520 / 56523 / 56524.commitmentUpgrade to 26.7.2 / 26.6.6 / 26.4.15 (LTS); the fix is also available in 26.8.0.commitmentUnsupported branches (26.5, 26.3 and older) will not be fixed and remain permanently vulnerable until upgraded.predictionAll versions prior to 26.7.2, 26.6.6 and 26.4.15 (LTS) are affected.statementExploit code has not yet been distributed, but the CVE is confirmed.statement
All claims by turansecurity