Reversing public #security advisories has been a lot of fun lately. Here's an exploit I've built for CVE-2025-9501 that potentially affects 1+ million #WordPress installations:
https://www.rcesecurity.com/2025/11/exploiting-a-pre-auth-rce-in-w3-total-cache-for-wordpress-cve-2025-9501/
MrTuxracer
npub1jc…q3ymk
2025-11-20 09:15:45 UTC
Author Public Key
npub1jcett84ggsp5yt776epnm4wnalrs6t56d25ry6y6kzkgq0v6qc5qsq3ymkSeen on
wss://relay.momostr.pinkPublished at
2025-11-20 09:15:45 UTCEvent JSON
{
"id": "7c084b4cf5177d113140ff6d65867994e4ca14078ab8479a4c4370cb2b796272",
"pubkey": "9632b59ea84403422fded6433dd5d3efc70d2e9a6aa832689ab0ac803d9a0628",
"created_at": 1763630145,
"kind": 1,
"tags": [
[
"t",
"wordpress"
],
[
"t",
"security"
],
[
"proxy",
"https://infosec.exchange/@MrTuxracer/115581265186644669",
"web"
],
[
"proxy",
"https://infosec.exchange/users/MrTuxracer/statuses/115581265186644669",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/MrTuxracer/statuses/115581265186644669",
"pink.momostr"
],
[
"-"
]
],
"content": "Reversing public #security advisories has been a lot of fun lately. Here's an exploit I've built for CVE-2025-9501 that potentially affects 1+ million #WordPress installations:\n\nhttps://www.rcesecurity.com/2025/11/exploiting-a-pre-auth-rce-in-w3-total-cache-for-wordpress-cve-2025-9501/",
"sig": "714148c7ffbf28c86d05a3066f73611d7ace560685bd9fd65dfc89a3bf95be6fd8f22dc04950886b707ffa9f558bd7dd608ec33a3bf351a225bfa6297658fc7b"
}