{"id":3433971,"date":"2013-02-04T15:35:44","date_gmt":"2013-02-04T15:35:44","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/widget-cache-vulnerability\/"},"modified":"2016-08-20T21:16:31","modified_gmt":"2016-08-20T21:16:31","slug":"widget-cache-vulnerability","status":"closed","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/widget-cache-vulnerability\/","title":{"rendered":"Widget Cache vulnerability?"},"content":{"rendered":"<p>Yesterday I happened to check the \/wp-content\/widget-cache directory and I found HUNDREDS of subdirectories for sites I had never heard of and many of which looked very sketchy (porn sites, etc.). I deleted all the directories and let the plugin recreate my local site sub-directory, and this morning I&#8217;m already seeing more unfamiliar directories in there:<\/p>\n<p>199.19.78.238\/<br \/>\n1f2a5db3d9b3a7df3345a4d43503bd4c\/<br \/>\n3bce3dd074f899d0e919ac4e9dfc1856\/<br \/>\n47330dff55c0c55ba8b1c2e222ce2158\/<br \/>\n63e21ec33b54094d2325990a8b3e6c05\/<br \/>\n999487ad80449975e0b0975c8e17032a\/<br \/>\nbestallgoods.com\/<br \/>\nd4f2a0259bbc380dc61e7130a25b00f6\/<br \/>\npop.sc****t.com\/<br \/>\nsc****t.com\/<br \/>\nsc****t.com.\/<br \/>\nsc****t.com:80\/<br \/>\nwww.lcg.org\/<\/p>\n<p>The ones that start with &#8220;sc&#8221; are my site. I&#8217;ve obfuscated the directory name for security reasons. <\/p>\n<p>Why, and how, are other directories for other sites being created in the widget-cache directory? This is VERY disconcerting.<\/p>\n<p>https:\/\/wordpress.org\/extend\/plugins\/wp-widget-cache\/<\/p>\n","protected":false},"template":"","class_list":["post-3433971","topic","type-topic","status-closed","hentry","topic-tag-cache","topic-tag-caching","topic-tag-widget-cache","topic-tag-widgets"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/3433971","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/3433971\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=3433971"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}