I normally don’t post about about WordPress upgrades, but this one is extremely important for anyone running version 2.1.1 that was just released a few days ago. Apparently a hacker got access to the WordPress.org server and inserted some malicious code into the download:
It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. We have locked down that server for further forensics, but at this time it appears that the 2.1.1 download was the only thing touched by the attack. They modified two files in WP to include code that would allow for remote PHP execution.
This is the kind of thing you pray never happens, but it did and now we’re dealing with it as best we can. Although not all downloads of 2.1.1 were affected, we’re declaring the entire version dangerous and have released a new version 2.1.2 that includes minor updates and entirely verified files.
It’s unfortunate that this happened several days ago because a large number of people have already downloaded it, but I guess we should just be grateful that it was caught now and not weeks from now. I wonder how many people this ended up affecting?
Download the new WordPress 2.1.2
Enjoyed the post? Subscribe to our feed to get a daily dose of CyberNet!
Tags: Freeware, Software, Web Sites, Apple, Downloads, Microsoft, Screenshots, WordPress
Related Posts:
- WordPress 2.0 Has Officially Been Released
- Firefox 2 Users Prompted to Upgrade to Firefox 3
- WordPress Hacked: Anyone Can View Future/Draft Posts
- Windows Vista Upgrade Advisor Available For Download
- Glimpse at WordPress 2.5
Ryan,
I’ve posted a small tutorial about Upgrading WordPress via Shell.
Nice job, that won’t exactly work for me because I have a lot of custom modifications, but it will work for most people. I’m still running 2.1 and I’m just going to find out what differences there are between 2.1 and 2.12 and make the respective changes. That’s what I’ve always done in the past and it always seems to work well.