• landfr

    (@landfr)


    So, hello people.

    My purpose is to test out various wordpress editions, about their safety. In order to do that and make them better, I would like to start from old, vulnerable WP editions with old, vulnerable plugins/themes.

    That said, I would like to install an old (WordPress5.0) WP and an old plugin(wpshop.1.3.9.5.zip).

    1) Problem no.1: When trying to install the WordPress5.0 edition, I get a White Screen of death and set the debug mode on: I come across some get_magic_quotes is deprecated errors. So, I go and comment out all the magic_quotes instances. Then, everything appears to be slightly in order, except some errors here and there.

    2) Problem no.2: When trying to install the old plugin(wpshop.1.3.9.5.), I also get many errors, the last of which is this
    Fatal error: Uncaught Error: Class 'SimpleXMLElement' not found in /var/www/html/wordpress/wp-content/plugins/wpshop/includes/librairies/install.class.php:64 Stack trace: #0 /var/www/html/wordpress/wp-content/plugins/wpshop/includes/librairies/install.class.php(559): wpshop_install::wpshop_insert_default_pages() #1 /var/www/html/wordpress/wp-content/plugins/wpshop/includes/librairies/install.class.php(346): wpshop_install::make_specific_operation_on_update() #2 /var/www/html/wordpress/wp-content/plugins/wpshop/includes/librairies/install.class.php(227): wpshop_install::execute_operation_on_db_for_update() #3 /var/www/html/wordpress/wp-includes/class-wp-hook.php(286): wpshop_install::update_wpshop() #4 /var/www/html/wordpress/wp-includes/class-wp-hook.php(310): WP_Hook->apply_filters() #5 /var/www/html/wordpress/wp-includes/plugin.php(453): WP_Hook->do_action() #6 /var/www/html/wordpress/wp-admin/admin.php(156): do_action() #7 /var/www/html/wordpress/wp-admin/plugins.php(10): require_once('/var/www/html/w...') #8 {main} in /var/www/html/wordpress/wp-content/plugins/wpshop/includes/librairies/install.class.php on line 64“.

    So, how am I supposed to test out old editions? Is this a kind of a php error? What can I do to test them out and try to test them?

    Thanks in advance!

Viewing 3 replies - 1 through 3 (of 3 total)
  • Alan Fuller

    (@alanfuller)

    Hi,

    Not only run old WP but run old PHP

    trying to run old WP on PHP 7.4 ( deprecated magic_quotes ) doens’t make sense

    5.0 was released dec 2018 php 7.4 wasn’t release until a year later

    personally I’d probably use PHP 5.6 for these sort of tests, as that is likely supported by older WP & plugins

    Thread Starter landfr

    (@landfr)

    Hello,

    Thanks for the answer. Am I supposed to install php5.6 with phpbrew? Because the support of php5.6 has stopped and I haven’t managed to find a way to install it on my updated linux system.

    Also, do you know what is my best bet for the most vulnerable wordpress edition + most vulnerable plugin of its time?

    Thanks,

    fr

    Alan Fuller

    (@alanfuller)

    I don’t know anything about phpbrew but the are certainly docker images for 5.6 available. But at least use 7.3 if you struggle building environments

    Take a look at WPScan pages for vulnerabilities
    https://wpscan.com/wordpresses?page=9

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Installing WordPress 5.0 and old plugins’ is closed to new replies.