CURL is the wordpress vulnerability 2.7+
class WP_Http_Curl {
function request($url, $args = array()) {
if ( !ini_get('safe_mode') && !ini_get('open_basedir') )
curl_setopt( $handle, CURLOPT_FOLLOWLOCATION, true );
function wp_remote_get($url, $args = array()) {
$objFetchSite = _wp_http_get_object();
return $objFetchSite->get($url, $args);
}
Read https://antichat.ru/threadedpost1298124.html#post1298124 with google translator, this is why there are so many wordpress trojans. Kill ’em.