WordPress has issued an urgent upgrade for users who downloaded WordPress 2.1.1 within the past 3-4 days:

It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. We have locked down that server for further forensics, but at this time it appears that the 2.1.1 download was the only thing touched by the attack. They modified two files in WP to include code that would allow for remote PHP execution.

This is the kind of thing you pray never happens, but it did and now we’re dealing with it as best we can.

-- Rogers Cadenhead

Comments

This is very interesting, You're a very skilled blogger. I've joined your feed and look forward to seeking more of your fantastic post. Also, I have shared your web site in my social networks!|


 

Do you mind if I quote a few of your posts as long as I provide credit and sources back to your webpage? My website is in the exact same niche as yours and my visitors would genuinely benefit from some of the information you present here. Please let me know if this alright with you. Many thanks!|


 

Add a Comment

These HTML tags are permitted: p, b, i, a, and blockquote. A comment may not include more than three links. Participants in this discussion should note the site's moderation policy.