WordPress 2.1.1 Critical Security Alert - Download Upgrade to 2.1.2
WordPress developer community has labeled and classified the entire version 2.1.1 of WordPress release dangerous with serious security threat and unsafe to use in production environment. WordPress users who are using WordPress v2.1.1, especially those who just downloaded it over the last 4 or 5 days, should immediately download the latest version 2.1.2 of WordPress and upgrade their installation by overwriting all old files fully. Apparently, a hacker or cracker had managed to hack into a server hosting wordpress.org, and gained user-level access to modify the download file of WordPress to include security-comprised exploitable code.
According to WordPress blog:
It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. We have locked down that server for further forensics, but at this time it appears that the 2.1.1 download was the only thing touched by the attack. They modified two files in WP (theme.php and feed.php) to include code that would allow for remote PHP execution.
If you have any questions on this security hole, you can email 21securityfaq@wordpress.org.
Download and install the latest version of Wordpress (version 2.1.2) from Download page to patch the security hole. Or download from direct download link for ZIP file.
Update: WordPress 2.2 released for download.
Share and contribute or get technical support and help at My Digital Life Forums.
Related Articles
- Fake Alert to Update Security System Sent to Microsoft Windows Users
- Automatically Update WordPress to Latest Version with Automatic Upgrade Plugin (WPAU)
- Windows Vista Anytime Upgrade - How to Upgrade Edition Guide and Price
- New HP DreamColor LP2480xz - The World’s First Affordable Color-Critical Display
- Download COMODO Internet Security 3.5 BETA 3 Comprehensive Internet Security Solution
- PS3 System Software (Firmware) Upgrade Version 2.4 Download
- Paginating or Split WordPress Post or Page with NextPage in WordPress Not Working
- Download Previous or Old Version of WordPress
- WordPress 2.2 Released for Free Download
- WordPress 2.3 Final Free Download
Entries (RSS)
July 5th, 2007 19:37
Hi,
I’m a 35 years old woman, divorced and with children. I work as bar tender, part-time, so I can use the time to take care of the house and kids and and I’ve found my equilibrium doing like this. During the endless spent in my house i like to do something, in particular that is watching movies on my satellite . I also adore to see classic movies. I don’t dislikenot at every hour but often to see the wheater forecast either.
I am enough sadisfied with my life and overall about my children. I just hope to stay health, so just an normal happy life.
Bye
Jessica