Wordpress Download Cracked

Home

WordPress 2.1.1 dangerous, Upgrade to 2.1.2: This is pretty bad. Yikes.

This morning we received a note to our security mailing address about unusual and highly exploitable code in WordPress. The issue was investigated, and it appeared that the 2.1.1 download had been modified from its original code. We took the website down immediately to investigate what happened.

It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file.

Deane | March 7, 2007
See Also: WordPress

Skip to Comments

Related Posts

  • WordPress 2.1
    WordPress 2.1 Ella: A roundup of the new features in WordPress 2.1. Gmail started a revolution, it seems: …
    – January 23, 2007
  • WordPress on Yahoo
    WordPress on Yahoo: As if Movable Type on Yahoo! wasn’t enough, now you can have WordPress pre-installed. When we…
    – December 20, 2005
  • Wordpress.com
    WordPress.com: Looks like Wordpress is starting hosted blogs at wordpress.com. The software is still available for download and self-hosting…
    – November 21, 2005

Add a Comment

Name:
URL:

Comment:
Markdown is enabled in comments. If you have to use HTML, we allow A HREF, B, BR, P, STRONG, EM, UL, LI, and BLOCKQUOTE.
 
Comments on this site are subject to our Terms of Service