No choice but to turn off my Wordpress sites overnight. Living in UTC+x, it's practically a guarantee that the patch fixing this Severity 10 vulnerability will come through in the wee hours of the morning. Not taking the chance that some bot will rip through every Wordpress site as soon as the proofs of concept are let loose.
0 Boosts
0 Likes
@futzle Er, yes, I should probably do same
@futzle doing the rounds: A possible temp fix is to turn off session.upload_progress.enabled, i.e. add to your php.ini file and reload fpm:
session.upload_progress.enabled = Off
@futzle gnah, I was really hoping to avoid this... 🙄 But probably the right call.
@futzle going to just shut down my hosting thing as well.. might as well 
@futzle I updated them all, then put them into maintenance mode. My host is across the issue.