If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another user into running gargoyle in a directory with a cracked libgarglk.so and gain access to the user’s account.
WordPress 4.9.4 - DoS vulnerability from 4.9.228/02/2018
23 months ago.
#Op Black Friday23/11/2018
The big day is here.