{"id":23401,"date":"2026-10-23T18:14:29","date_gmt":"2026-10-23T16:14:29","guid":{"rendered":"http:\/\/blog.wenzlaff.de\/?p=23401"},"modified":"2026-10-23T18:14:29","modified_gmt":"2026-10-23T16:14:29","slug":"kali-und-wp-kritische-luecken-in-php-php2shell","status":"publish","type":"post","link":"http:\/\/blog.wenzlaff.de\/?p=23401","title":{"rendered":"Kali und WP: kritische L\u00fccken in PHP (PHP2Shell)"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/blog.wenzlaff.de\/wp-content\/uploads\/2026\/10\/wenzlaff.de-2026-10-23-um-18.05.32-scaled.png\" alt=\"\" width=\"2560\" height=\"271\" class=\"aligncenter size-full wp-image-23402\" srcset=\"http:\/\/blog.wenzlaff.de\/wp-content\/uploads\/2026\/10\/wenzlaff.de-2026-10-23-um-18.05.32-scaled.png 2560w, http:\/\/blog.wenzlaff.de\/wp-content\/uploads\/2026\/10\/wenzlaff.de-2026-10-23-um-18.05.32-300x32.png 300w, http:\/\/blog.wenzlaff.de\/wp-content\/uploads\/2026\/10\/wenzlaff.de-2026-10-23-um-18.05.32-1024x108.png 1024w, http:\/\/blog.wenzlaff.de\/wp-content\/uploads\/2026\/10\/wenzlaff.de-2026-10-23-um-18.05.32-768x81.png 768w, http:\/\/blog.wenzlaff.de\/wp-content\/uploads\/2026\/10\/wenzlaff.de-2026-10-23-um-18.05.32-1536x163.png 1536w, http:\/\/blog.wenzlaff.de\/wp-content\/uploads\/2026\/10\/wenzlaff.de-2026-10-23-um-18.05.32-2048x217.png 2048w\" sizes=\"auto, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px\" \/><\/p>\n<p>Check Kali Linux:<\/p>\n<pre class=\"theme:dark-terminal font-size:14 lang:default decode:true \" >dpkg -l | grep -E '^ii\\s+php8'<\/pre>\n<p>Ok, save.<\/p>\n<p>Check WordPress: Werkzeuge &#8211; Webseiten Zustand &#8211; Berichte &#8211; Server <\/p>\n<p>Ok, save.<\/p>\n<p>Am 21. Oktober 2026 hat das PHP-Projekt zwei schwere Sicherheitsl\u00fccken geschlossen. <\/p>\n<p>Sicher sind PHP 8.5.12, 8.4.27, 8.3.36 und 8.2.35 oder neuer ldt. <a href=\"https:\/\/www.bsi.bund.de\/SharedDocs\/Cybersicherheitswarnungen\/DE\/2026\/2026-297981-1032.html?nn=520690#download=1\" target=\"_blank\">BSI<\/a> (siehe auch dort im PDF).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Check Kali Linux: dpkg -l | grep -E &#8218;^ii\\s+php8&#8216; Ok, save. Check WordPress: Werkzeuge &#8211; Webseiten Zustand &#8211; Berichte &#8211; Server Ok, save. Am 21. Oktober 2026 hat das PHP-Projekt zwei schwere Sicherheitsl\u00fccken geschlossen. Sicher sind PHP 8.5.12, 8.4.27, 8.3.36 und 8.2.35 oder neuer ldt. BSI (siehe auch dort im PDF).<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","footnotes":""},"categories":[1319],"tags":[2532,1121,1879,6346],"class_list":["post-23401","post","type-post","status-publish","format-standard","hentry","category-sicherheit-2","tag-fix","tag-kali","tag-php","tag-php2shell"],"_links":{"self":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/posts\/23401","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=23401"}],"version-history":[{"count":3,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/posts\/23401\/revisions"}],"predecessor-version":[{"id":23405,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/posts\/23401\/revisions\/23405"}],"wp:attachment":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=23401"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=23401"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=23401"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}