1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

***ATTENTION-WARNING*** Update your wordpress now. Zero Day Flaw Found.

Discussion in 'BlackHat Lounge' started by Skyebug77, Feb 8, 2017.

  1. Skyebug77

    Skyebug77 Jr. VIP Jr. VIP

    Joined:
    Mar 22, 2012
    Messages:
    1,931
    Likes Received:
    1,354
    Occupation:
    Marketing
    Location:
    Portland,Or
    • Thanks Thanks x 10
  2. CyberHour

    CyberHour Jr. VIP Jr. VIP

    Joined:
    Apr 3, 2016
    Messages:
    647
    Likes Received:
    160
    Location:
    localhost
    Home Page:
    You will find same warning in Google Webmaster :)
     
    • Thanks Thanks x 2
  3. Aliarz

    Aliarz Newbie

    Joined:
    Jan 16, 2017
    Messages:
    15
    Likes Received:
    4
    Thank you!
     
    • Thanks Thanks x 1
  4. yugejackpots

    yugejackpots BANNED BANNED

    Joined:
    Apr 16, 2016
    Messages:
    193
    Likes Received:
    77
    Yea these Muslim hackers hit like 5 of my PBNs running an older version of WP all at the same time. Hacked page was an Islamic flag. Fortunately the host was able to restore from backup.
     
  5. Aliarz

    Aliarz Newbie

    Joined:
    Jan 16, 2017
    Messages:
    15
    Likes Received:
    4
    Me too I'm uploading manual backup.
     
  6. Backopy

    Backopy Newbie

    Joined:
    Feb 7, 2017
    Messages:
    17
    Likes Received:
    3
    Occupation:
    404
    Location:
    Sydney
    Thank you for the warning.
     
  7. lawyal

    lawyal Regular Member

    Joined:
    Oct 25, 2016
    Messages:
    320
    Likes Received:
    203
    Gender:
    Male
    Location:
    Upper Eastside
    Thank you, just started updating.
    Since only 4.7.0 and 4.7.1 seem to be problematic - will lower version not be affected?
     
  8. umerjutt00

    umerjutt00 Jr. VIP Jr. VIP

    Joined:
    Oct 28, 2011
    Messages:
    3,823
    Likes Received:
    2,061
    Occupation:
    Ninja
  9. Nut-Nights

    Nut-Nights Jr. VIP Jr. VIP

    Joined:
    Jun 20, 2013
    Messages:
    5,029
    Likes Received:
    3,206
    Location:
    Hell
    Home Page:
    Bump for other, My two sites got hacked, Fuck you wordpress. I am done with WP.:mad:
     
    Last edited: Feb 8, 2017
  10. Ste Fishkin

    Ste Fishkin Jr. VIP Jr. VIP Premium Member

    Joined:
    May 14, 2011
    Messages:
    2,047
    Likes Received:
    10,421
    Please don't blame wordpress because you're too lazy to update it....
     
    • Thanks Thanks x 1
  11. theconscience

    theconscience Regular Member

    Joined:
    May 16, 2014
    Messages:
    311
    Likes Received:
    28
    Location:
    UK
    Why dont Wordpress themselves update it?
     
    • Thanks Thanks x 1
  12. JustUs

    JustUs Power Member

    Joined:
    May 6, 2012
    Messages:
    626
    Likes Received:
    582
    Read the linked article. Wordpress worked with security teams and updated Wordpress a week before releasing the news. So the question is really: Why did you not update your Wordpress installation when your administrative page notified you that there was an update?
     
  13. bartosimpsonio

    bartosimpsonio Jr. VIP Jr. VIP Premium Member

    Joined:
    Mar 21, 2013
    Messages:
    12,041
    Likes Received:
    10,831
    Occupation:
    WHEREZ MA
    Location:
    BITCOINS AT?
    Home Page:
    Well, shit.

    Tanks for the heads up. Hope it's not too late, gonna check all sites now.
     
  14. vin42

    vin42 Junior Member

    Joined:
    May 24, 2016
    Messages:
    145
    Likes Received:
    26
    Location:
    WWW
  15. JustUs

    JustUs Power Member

    Joined:
    May 6, 2012
    Messages:
    626
    Likes Received:
    582
    While Wordpress can auto update, sometimes the updates break the sites - especially if a plugin is not compatible with the new version of WP. Therefore, many operators turn off the auto update. I do. But as soon as the admin panel notifies me, I download the new version and test it against the plugins I run singly and in total combination. Sometimes all of the plugins are compatible with each other if loaded only in a certain order, sometimes one plugin or the other is not compatible at all, and sometimes minor tinkering is needed for a given plugin.

    Regardless, there are sound reasons for turning off auto updates.
     
    • Thanks Thanks x 1
  16. asap1

    asap1 BANNED BANNED Jr. VIP

    Joined:
    Mar 25, 2013
    Messages:
    4,961
    Likes Received:
    3,179
    Auto update baby.
     
  17. Hawkster

    Hawkster Jr. VIP Jr. VIP

    Joined:
    Jun 22, 2013
    Messages:
    3,426
    Likes Received:
    3,615
    Gender:
    Male
    Occupation:
    Listen to everyone - Follow no-one
    Location:
    UK
    Home Page:
    Last edited: Feb 8, 2017
  18. amoon

    amoon Jr. VIP Jr. VIP

    Joined:
    May 16, 2015
    Messages:
    1,553
    Likes Received:
    814
    Gender:
    Male
    Occupation:
    IM - BHW
    Location:
    Map–Territory
  19. Hawkster

    Hawkster Jr. VIP Jr. VIP

    Joined:
    Jun 22, 2013
    Messages:
    3,426
    Likes Received:
    3,615
    Gender:
    Male
    Occupation:
    Listen to everyone - Follow no-one
    Location:
    UK
    Home Page:
    Maybe request this be stickied OP?
     
  20. Skyebug77

    Skyebug77 Jr. VIP Jr. VIP

    Joined:
    Mar 22, 2012
    Messages:
    1,931
    Likes Received:
    1,354
    Occupation:
    Marketing
    Location:
    Portland,Or
    • Thanks Thanks x 1