Announcements

Security Alert: TimThumb Script

Please be advised tthere is a vulnerability in the TimThumb script that can compromise your hosting account. TimThumb is an auto-thumbnail generating script used by a number of premimum WordPress themes, although it can be installed independently.

If you have installed this script manually, you need to upgrade to the latest version, available here: http://code.google.com/p/timthumb/

If you have one (or many) WordPress themes, by far the simpliest option to clean this up is using a WordPress plugin expressly created for this purpose: http://wordpress.org/extend/plugins/timthumb-vulnerability-scanner/ - I've used it and it's quite simple, allowing you to automatically update the vulnerable script versions with just a few clicks.

If you're not sure if you have the script running in your WordPress site, you can still use the plugin above to check for you and delete the plugin when you're done if you'd like. If you're confused by WP plugins and need help, please contact me and I'll assist in making sure you're not running the exploited script.

Please be advised this needs to be addressed as soon as possible. I appreciate your help in keeping your hosting secure.

~Dixie

Monday, November 21, 2011

« Back

View RSS Feed