March 27, 2008

WordPress vulnerabilities - no one is safe

Lee Hopkins wrote this 9:36 pm:

If you're new here, you may want to subscribe to my RSS feed. You can even subscribe by email! Thanks for visiting!

Guardian angel Jon Hoel from the PR Junction podcast has pointed out that a really horrible security breach is doing the rounds of WordPress blogs.

Says Jon,

Hi Lee,
The PR agencies may not have come around yet, but the spammers are certainly giving blogs plenty of attention.

Site hack issue as discussed:  HTML appears in your blog posts - invisible on your blog, but shows up on RSS reader and email distribution.

Even the latest versions of WordPress (Version 2.3.3) are vulnerable: http://wordpress.org/support/topic/162092

To ‘harden’ your WordPress blogs, you might want to check out these links as well:
http://codex.wordpress.org/Hardening_WordPress

Thanks, Jon — I’ve installed the AskApache Password Protect plugin across many of the various blogs of mine and my clients, but there are some hassles with some of the hosts who have bizarre hosting arrangements (finger pointed at Melbourne IT in particular - on the one hand they have superb bandwidth allowances, on the other their blog hosting completely and utterly sucks).

Currently listening to: Moby - Hotel - Temptation

Stumble it!

* Filed under: Uncategorized

 

One Response to “WordPress vulnerabilities - no one is safe”

  1. Marie Says:
    March 28th, 2008 at 7:30 am

    Hi Lee,

    Thanks so much for this article we have a wordpress website so it was great to read your post.

    We are your social media cousins here in NZ.

    Keep up the great work in Oz, my sister lives in Adelaide so the next time we’re in the neighbour we’ll come and say HI

    Best,
    Marie

Leave a Reply

Please note:
1. If this is your first time commenting using the email address you have given, your comment will be held in 'moderation' and won't appear until one of us here at BetterComms Towers approves it. This stops spammers from flooding our posts with garbage. It may take up to 48 hours for your comment to appear -- sorry!
 
2. This blog runs the WP-Cache plugin, which reduces the amount of processing our host's server has to perform on this blog. The result for you is that our site crashes less. The downside is that sometimes it might take a minute or two for your comment to appear. Please don't resubmit your comment if it doesn't appear straight away. Please be patient and try refreshing your browser after a minute or two... Thanks, Lee

Trackback: trackback from your own site
« « Why it’s now raining in Adelaide: God sent us an angel | I bought this Porsche Carrera for my wife, honestly! » »