gHacks technology news » wordpress exploits http://www.ghacks.net A technology blog covering software, mobile phones, gadgets, security, the Internet and other relevant areas. Tue, 24 Nov 2009 03:24:03 +0000 http://wordpress.org/?v=2.8.6 en hourly 1 Secure Wordpress with the first Wordpress Worm http://www.ghacks.net/2007/08/02/secure-wordpress-with-the-first-wordpress-worm/ http://www.ghacks.net/2007/08/02/secure-wordpress-with-the-first-wordpress-worm/#comments Thu, 02 Aug 2007 15:57:18 +0000 Martin http://www.ghacks.net/2007/08/02/secure-wordpress-with-the-first-wordpress-worm/ Did you know that the latest version of Wordpress contains at least seven security vulnerabilities that could compromise your blog ? If you use Wordpress you should make sure that to fix them as soon as possible. The easiest way to fix them right now is to use the first Wordpress worm – which is a good one – to fix all seven vulnerabilities for you.

The process requires some faith that the xss worm is really fixing the vulnerabilities but the application itself is easy. About the faith: I have not read negative reviews so far and the worm has been released two days ago which should be enough time for some experts to complain about it.

If you want to secure your blog you simply write a comment on your own blog while you are logged in as the administrator linking to http://mybeni.rootzilla.de/mybeNi/ ; Click on that link from your admin panel afterwards which will lead to the site.

The first page explains what will be done and only if you actively click on “Secure my Blog” the vulnerability scan will be started. It will check three Wordpress files for the vulnerabilities and offer to fix them if the vulnerability is found.

The vulnerabilities can only be fixed if the files are writable so make sure they are. An alternative would be to copy the code that will be inserted and add it manually in the files. The complete code of the file is shown and the addition is highlighted.

I suggest to run the worm a second time to make sure that your blog is safe and that the fixes have been applied.

Tags: , , ,

Related posts

]]> http://www.ghacks.net/2007/08/02/secure-wordpress-with-the-first-wordpress-worm/feed/ 7