Shortcode Magic Wordpress Hack -- check version!

tnhomestead

Regular Member
Joined
Oct 9, 2011
Messages
385
Reaction score
254
Hey just had a site of mine compromised by using shortcode magic. It appears to use an older version of tim thumb, which allows a hacker to compromise your site. This facebook page lists a bunch of themes and plugins that have this exploit in them.
Code:
https://www.facebook.com/hacker.anondz/posts/450119431748485
Anyway most of you know this -- and so did I -- but I didnt check and double check!
Some more info here -- just follow the links!
Code:
https://www.facebook.com/hacker.anondz/posts/450119431748485
 
Quick check to see if your site is hacked -- since most of these script kiddies dont modify the script -- look for a file named x.txt in your home directory or a file called logx.txt If you see either one you have been hacked, get it cleaned.
 
Back
Top