Warning to WordPress Users
Put forth on March 2, 2007 by XicanoPwr
Posted in Blogging, Misc
If anybody is using [tag]WordPress[/tag] 2.1.1, don’t! It seems, some cracker (not the gringo kind, its another term for a hacker) played with the software code. From WordPress:
If you downloaded WordPress 2.1.1 within the past 3-4 days, your files may include a security exploit that was added by a cracker, and you should upgrade all of your files to 2.1.2 immediately.
This morning we received a note to our security mailing address about unusual and highly exploitable code in WordPress. The issue was investigated, and it appeared that the 2.1.1 download had been modified from its original code. We took the website down immediately to investigate what happened.
It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. We have locked down that server for further forensics, but at this time it appears that the 2.1.1 download was the only thing touched by the attack. They modified two files in WP to include code that would allow for remote PHP execution.
I have noticed that people have been complaining about getting a lot of spam. I wonder if this the reason.
Lucky for me, I decided to upgrade to 2.1.1 this morning. However, if I were anybody who did upgrade and is either running WordPress through a web host and/or your own server. I would make sure your firewalls and any other intrusion detection system is up. You never know, what malicious code was put into the software.
Here is the link to download the newer version of WordPress.
Related posts
| 
Print This Post
|
This is the blog of Edmundo "XicanoPwr" Rocha, a social worker, an activist, freelance writer and founder and editor of The Sanctuary. My interests include: immigration reform, critical race theory and it's interaction with equality/inequality and freedom/oppression as they relate to the experiences of people of color in the Americas.
Para Justicia y Libertad is a Latino-centered political blog focusing on the humanistic perspective of politics, history, and society as they relate to the Latina/o community throughout Texas and the United States.
4 Comments
You can follow any responses to this entry through the
Comments (RSS) feed.
Thanks for the heads-up, XP!
No problem Yolanda. I sort of find it odd how the hacker went about hacking the system. It looks like the hacker knew somebody from WP.
deee-amn.
Hilarious!
Sorry, comments for this entry are closed at this time.