December 28, 2004

Wordpress Warning

There is a bug in Wordpress 1.2.1 and earlier that allows losers with nothing better to do to hack into your Wordpress web site. Horseshues.com got hit on the 24th and I didn't notice until about 30 minutes ago. Luckily, the fine folks at Digital Space were able to restore the site from a backup in about 5 minutes.

If you are running Wordpress you need to either upgrade to 1.2.2, or apply the simple fix outlined here.

Permalink

Comments

Thanks for the heads up on this. I just looked at the WP support forums and it looks like it is a problem with some code that was introduced in 1.2.1, so it is actually 1.2.1 and newer versions that are affected. Apparently it is even in the 1.3 beta release. Lucky for me I am still using 1.2, so I guess it does pay to procastinate with those updates.

Posted by: don at December 29, 2004 12:53 PM

If the comment entry box is gone it's because comments are closed for this entry. Please feel free to use the "contact" link above to get in touch.