4 ms·

The diff is at: http://plugins.trac.wordpress.org/changeset?reponame=&old=399310%40addthis&new=395689%40addthis http://plugins.trac.wordpress.org/changeset?repo

by qixxiq 15y ago

The diff is at: http://plugins.trac.wordpress.org/changeset?reponame=&old=399310%40addthis&new=395689%40addthis http://plugins.trac.wordpress.org/changeset?reponame=&ol... PHP's assert function ridiculously runs eval() on the code too, so to use their backdoor they just include code as their HTTP_REFERER.

PleaseStand 15y ago
The backdoors in the two other plugins mentioned: http://plugins.trac.wordpress.org/changeset/399276 http://plugins.trac.wordpress.org/changeset/399276 http://plugins.trac.wordpress.org/changeset/399286 http://plugins.trac.wordpress.org/changeset/399286