[wp-hackers] Forum post needs looking at

[Jason Bainbridge]

On 10/8/05, Podz <podz at tamba2.org.uk> wrote:
> "They probably exploited a recent Wordpress vulnerability to get their
> content onto your site."
>
> http://wordpress.org/support/topic/46439

I think that comment was unfounded, the hacked user is running 1.5.2
and I'm not aware of any known security issues with the current
release.

It is likely the host that was exploited through something like the
cPanel exploit that has been circulating lately, if someone does get
hacked like that then their first port of call should be their host
not the Wordpress forums.

Hosts seem to be washing their hands of a lot of things lately, they
should at least do some due diligence first before blaming a third
party script but in this case it doesn't look like the host has even
been contacted yet.

Regards,
--
Jason Bainbridge
http://kde.org - webmaster at kde.org
Personal Site - http://jasonbainbridge.com