Warning: fopen(/nfs/c02/h12/mnt/16204/domains/mandarinmusing.com/html/wp-content/cache/) [function.fopen]: failed to open stream: Is a directory in /nfs/c02/h12/mnt/16204/domains/mandarinmusing.com/html/wp-content/plugins/wp-cache/wp-cache-phase2.php on line 96
WordPress Blog Software Attacked: Upgrade to 2.1.2 « MandarinMusing.com

WordPress Blog Software Attacked: Upgrade to 2.1.2

Published on March 7, 2007 in Announcements, Attackers, Hackers, Matt Mullenweg, WP, WP 2.1.1, WP 2.1.2, Web technology, Weblog tools, WordPress, WordPress Software, Wordpress scams, cybercrime, hacks and technology. 2 Comments

Matt Mullenweg, has declared the entire 2.1.1 version dangerous as cybercrooks gained user-level access to one of the servers controlling WordPress.org and altered two files that would allow remote PHP code to be executed.

Users who visit websites running on the same server as the compromised WordPress software are not likely to be at risk, but people running the websites (with WordPress software) and running the servers (controlling WordPress), must block access to theme.php and feed.php.

While, some users might have been affected as there are thousands of WordPress downloads everyday, the good news is that the bad news comes with an alternative, WordPress 2.1.2, a new Version that includes minor updates and entirely verified files. Save yourself from attackers now and upgrade to 2.1.2.