«

»

Sep
08

Timthumb Vulnerability Check

There has been a great deal of press and concern in the WordPress community about a Vulnerability found in the TimThumb script whcih is used in many WordPress Themes. The script it’s self is not an issue but without being updated it does leave a cache directory open for people to exploit.

The fact that this vulnerability has been found is old news and the TimThumb script has been updated by its developers, however, some theme developers have yet to update their themes with the new more secure version of TimThumb.

If you are running a WordPress website make sure you install Timthumb Vulnerability Scanner a plugin that will look at your theme Directory and tell you if you are using the TimThumb script and if it needs updating it gives you the option to do so without any messing about with checking code or uploading new files.

I also Use WordPress Firewall and I have recently noticed heavy attacks looking for specific themes and the TimThumb script, so there are hackers that are trying to exploit this vunerability.

This plugin is a must… and while you are at it make sure you install WordPress Firewall 2 and Login Lockdown plugins, it is worth 5 minutes of your time.

Related posts:

  1. Feather WordPress Theme Review Elegant themes have just launched another wordpress theme ‘Feather’, this is great news for me as I have only been a member of Elegant themes...
  2. Boutique WordPress Theme From Elegantthemes Elegant Themes have just released another theme to their collection, as a member I get this WordPress Theme included, and, this one is a good one!...
  3. Elegant Themes For WordPress Review I have now been using Elegant Themes for about a month, and thought it about time I gave a considered opinion. Overall I could not...
  4. Elegant Themes – Premium WordPress Themes I have just started working on some wordpress sites and have discovered Elegant Themes, I know that you are going to say why buy premium...
  5. How To Check If You Are Ready For WordPress 3.2 If you have ready my previous post about a first view of WordPress 3.2, you will have noted that there are some significant requirements changes...
  6. More From Elegant Themes – Chameleon WordPress Theme I posted earlier today about joining Elegant themes, I am onto my third site of the day (Yes I’m on a roll) I have uncovered...
  7. WordPress 3.1 Release And And Digitalquill Plugin Updates Regular users of WordPress will already be aware that version 3.1 code named ‘Reinhardt’ has just been released. This is the 14th release of WordPress...
  8. Datafeed Import Plugin For WordPress April Discount We are offering our Datafeed Import Plugin for WordPress at a discounted price of £20 for the whole of April when you buy from the...
  9. WordPress 3.2 Released I Hope You Are Ready! WordPress 3.2 has been released this morning, I hope that you are ready! As I mentioned in my review of the release candidate of WordPress...

Leave a Reply

Your email address will not be published.

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>