[CRITICAL] Multiple CWP Servers Infected – Arbitrary PHP Code Execution via Publ

[Purelaise]

Just read that eval cant actually be blocked? I have added assert. I cant see any issues website wise yet.

[overseer]

It's probably specific to your WP installation's subset of plugins and theme. Nominally WP is keyed to PHP 7.4 for full compatibility, but 8.1 is recommended for security and performance if you don't have any legacy plugins that specifically need 7.4. So I would expect some plugins may need more functions for full functionality.

[pedromidiasf]

Just read that eval cant actually be blocked? I have added assert. I cant see any issues website wise yet.

if you have websites that need that command it will be a problem. But if you don't need it, that's fine