recipe-maintainers/wordpress
0
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

block wp2shell CVE-2026-63030

Browse Source
This commit is contained in:
Simon
2026-07-21 13:52:43 +02:00
parent d271532f31
commit 71ffa2a1db
2 changed files with 15 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
abra.sh
+1 -1
View File
@@ -2,7 +2,7 @@ export PHP_UPLOADS_CONF_VERSION=v4
export ENTRYPOINT_CONF_VERSION=v8 export ENTRYPOINT_CONF_VERSION=v8
export ENTRYPOINT_MAILRELAY_CONF_VERSION=v2 export ENTRYPOINT_MAILRELAY_CONF_VERSION=v2
export MSMTP_CONF_VERSION=v4 export MSMTP_CONF_VERSION=v4
export HTACCESS_CONF_VERSION=v3 export HTACCESS_CONF_VERSION=v4
export USERS_CONF_VERSION=v1 export USERS_CONF_VERSION=v1
wp() { wp() {
htaccess.tmpl
+13 -5
View File
@@ -3,6 +3,19 @@
Require all denied Require all denied
</FilesMatch> </FilesMatch>
# Block XML-RPC
<Files xmlrpc.php>
Require all denied
</Files>
# Block wp2shell CVE-2026-63030
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{QUERY_STRING} rest_route=.*/batch/v1 [NC]
RewriteRule .* - [F,L]
RewriteRule ^wp-json/batch/v1 - [F,L]
</IfModule>
{{ if eq (env "MULTISITE") "" -}} {{ if eq (env "MULTISITE") "" -}}
# BEGIN WordPress # BEGIN WordPress
@@ -60,8 +73,3 @@ RewriteRule . index.php [L]
# END WordPress Multisite # END WordPress Multisite
{{- end }} {{- end }}
# Block XML-RPC
<Files xmlrpc.php>
Require all denied
</Files>