Old WordPress Versions Under Attack

Posted by : Dexter Panganiban | ; Filed Under Wordpress

You are invited to have my FREE RSS Feeds or you may Subscribe to me via emailfor latest information in this website.

Have you upgraded to WordPress Ver 2.8.4 , well if not better read Old WordPress Versions Under Attack blog by Lorelle telling that old WordPress Version is now under attack. I have not encountered any problem with Wordpress 2.8.4 , But I believed those people who made their blog customized to lower version of WordPress might have problem. But better do it now or be sorry, You have been warned.

There are two clues that your WordPress site has been attacked.
There are strange additions to the pretty permalinks, such as example.com/category/post-title/%&(%7B$%7Beval(base64_decode($_SERVER%5BHTTP_REFERER%5D))%7D%7D|.+)&%/. The keywords are “eval” and “base64_decode.”

The second clue is that a “back door” was created by a “hidden” Administrator. Check your site users for “Administrator (2)” or a name you do not recognize. You will probably be unable to access that account, but Journey Etc. has a possible solution.

So what are you waiting for act now and upgrade. But be sure to back your files.

Wordpress 2.8.5 Just Released
I would suggest upgrading to the latest Wordpress Version that was released which is Wordpress 2.8.5...
WordPress 2.6 Beta 2
What after a week of releasing Beta 1 there is now Beta 2, Again this make me think if we need to i...
How to know if your Yahoo chat mate is really offline
Did you know that you can see if your chatmate is really offline or not. Thanks to Web Stuff Scan ...
WordPress 2.6 is out, Is it Stable ?
Adobe Acrobat Updated

About the author

Dexter Panganiban : Dexter is a techie person that also blogs at his Personal Blog " Dexter Panganiban Site ", He is a Mechanical Engineer by Profession. He loves Search Engine Optimization and Making Money Online

Interesting Comments

2 Responses to “Old WordPress Versions Under Attack”

ariston|how to make mass money online on September 6th, 2009 6:36 am

@sir Dex,
I don’t know about this kind of attack but for the last couple of weeks my site had been tagged by Google as a harmful site(malicious code = iframe), and I had to removed all the Ads.
And yes, you have to make sure that your WordPress is regularly updated for security reasons.
btw, thanks for posting!

Reply
Dexter | Techathand.net Reply:
September 6th, 2009 at 10:55 pm
@ariston|how to make mass money online,

I think your problem is now solved because I am not seeing those warning from Google. One of the reason of that problem is the script that you are using has a problem with Google. Remember google hates automatic

Reply