HUGE hacking exploit in WordPress 2.3.3
Posted on March 25, 2008
Filed Under Webmasters |
I’ve recently been informed of a huge exploit in the latest version of Wordpress. A script which has infected roughly 45,000 websites and rising (by Google’s count).
What it does is creates a directory in your wp-contents folder named “1″ so it would basically be at http://www.yourdomain.com/wp-contents/1/.
Once the directory is there, it somehow creates a list of web pages including everything from gambling to porn. Google seems to have been indexing these pages left and right.
I’ve yet to find a definite answer on how to protect yourself and/or get rid of this Wordpress exploit, but there are plenty of discussions about it all over the net.
For more information and discussion about the WordPress 2.3.3 exploit please See:
http://www.websecurity.ro
http://smackdown.blogsblogsblogs.com
http://www.bontb.com
I hope none of you are personally affected by this, but if you are I’m glad I could point it out to you.
If anyone has a solution to this yet, I’d We’d be glad to know.
For heaven’s sake, stumble this so I can get the word out to as many people as possible!
Keith
Comments
6 Responses to “HUGE hacking exploit in WordPress 2.3.3”
Got Something to Say?
-
unTECHy Hello I'm Keith, a smalltown Iowa (USA) boy. I came up with unTECHy at an attempt to try my hand at blogging. Feel free to follow me as I attempt to educate and entertain my visitors with my unTECHy points-of-view.
Great Post! Keith
WordPress 2.5 is released today and hopefully this hole is plugged in the new version.
Ash’s last blog post..Is MAC filtering a false security measure?
Wow, I had never even known about this, and I consider myself well updated…scary. Thanks for the article!
How about adding a .htaccess to the wp-content folder.
Great post. It’s a good idea to raise awareness about this sort of thing.
Website Design’s last blog post..Get Free Inbound Links Using Your Blog Feed
[…] Well I stand corrected about WordPress 2.3.3 being secure thanks to unTECHy, and a number of other blogs he has linked to on his […]