Maker tech hub — AI · 3D print · Pi · ESP32 · plus the classic tech archive.

Free ESP32 kit · AI tools directory · Books · Archive

Avery J. Parker Practical maker tech — AI tools, 3D printing, Raspberry Pi & ESP32
Classic tech archive · 2026 bridge. Historical tip — verify commands and threat context before reusing.
Security archive browse Network Ninja (ops/security) Modern projects Maker hub home AI tools directory Advertising / media kit

Full archive · Archive → modern map · Start here

Classic tip · Classic

XML-RPC for PHP vulnerability attack attempts

· · Computers , General Web/Tech , Security , Viruses

Incidents.org is reporting on attacks against a recent XML-RPC vulnerability in PHP. This would affect users of PostNuke, Drupal, b2evolution, Xoops, WordPress, PHPGroupWare and TikiWiki. As far as I…

Written by

Avery J. Parker

IT veteran, maker educator, and author of Network Ninja, 3D Printing Mastery, and AI Workflow Mastery. Business IT: Diversified Tech Solutions.

Incidents.org is reporting on attacks against a recent XML-RPC vulnerability in PHP. This would affect users of PostNuke, Drupal, b2evolution, Xoops, WordPress, PHPGroupWare and TikiWiki. As far as I know there are fixes for each of these in the most recent versions of the software.



It basically acts as a network worm and AV vendors have added detection for it at this point. If you run any of the above (or any other php-based cms) look to ensure you have the most recent release running or have taken other measures to mitigate the risk.

Related