A worm is circulating that can post malware and spam to some WordPress blogs using outdated versions of the blogging software, according to a post by Matt Mullenweg, founding developer of WordPress.
The worm can be tough to catch, as Mullenweg explains: “it registers a user, uses a security bug (fixed earlier in the year) to allow evaluated code to be executed through the permalink structure, makes itself an admin, then uses JavaScript to hide itself when you look at users page, attempts to clean up after itself, then goes quiet so you never notice while it inserts hidden spam and malware into your old posts.”
The vulnerability allowing the attack was discovered August 11, at which point WordPress encouraged users to upgrade to version 2.8.4. However, many people have yet to upgrade, and reports online indicate the worm is making dubious progress by the hour.
The worm does not affect the current version 2.8.4 and the one prior to it. And it only affects people who host their own WordPress blog. Blogs hosted on WordPress.com are unaffected.
Users can find upgrade links and instructions here. WordPress has also posted an FAQ for people who think their blog has been hacked.
 |
Buzz this! |
You can subscribe by e-mail to receive news updates and breaking stories.
Nice content indeed! i will visit as often as i can.
cheers
I was searching for Blogs about WordPress blogs falling prey to worm | E-Commerce Center and found this site. I am interested in your content and I appreciate sites like this.
Hey, I read a lot of blogs on a daily basis and for the most part, people lack substance but, I just wanted to make a quick comment to say GREAT blog!…..I”ll be checking in on a regularly now….Keep up the good work!
- Marc Shaw
Hey, I found your blog while searching on Google. I have a blog on online stock trading, I’ll bookmark your site.
Should there be another persuasive post you can share next time, I’ll be surely waiting for it. Thanks.
Good article.thanks excellent content.
Ah!!! at last I found what I was looking for. Somtimes it takes so much effort to find even tiny useful piece of information.
Nice post. Thanks
Hello,
i subscribed because i think this is the right place for me.
bye