New answers tagged shellcode
0
If you run the WordPress as user www-data, an attacker can do everything the user www-data can do. That's usually quite a lot:
Wide read access. You could test what you can access e.g. using sudo su -s /bin/bash www-data.
Write access to all the other sites run as www-data. You should treat every site as potentially compromised.
To prevent that in the ...
Top 50 recent answers are included
