Wordpress Vunerability

[Webzcas]

For all webmasters that use Wordpress, there is a major security vunerability with any wordpress site that uses timthumb.php to resize images on the site. The vunerability is not with the actual wordpress install itself, but if your theme employed uses Timthumb, then your site is at risk. Whereby a hacker can gain ssh access to your site.

One of my sites got hit yesterday, thankfully I have sucuri.net on a monthly retainer and they cleared all the malware and backdoors. The hacker even had created a new wordpress admin account

Anyhow for information on this vunerability visit this link:

http://blog.sucuri.net/2011/08/wordp...thumb-php.html

It is also well worth using the free malware scanner that Sucuri provide on their site.

I can't recommend Sucuri enough, they also sorted out the problem with Affiliate Guard Dog last year.

Anyhow, for those that use wordpress, always make sure your site and the plugins and themes used are kept up to date.