Comments on: WordPress Community Vulnerable http://blogsecurity.net/wordpress/articles/article-230507 Always something worth reading... Fri, 12 Mar 2010 11:09:45 +0000 http://wordpress.org/?v= hourly 1 By: Vulnerabilităţi WodPress | Sit web http://blogsecurity.net/wordpress/articles/article-230507/comment-page-2#comment-16890 Vulnerabilităţi WodPress | Sit web Wed, 07 Oct 2009 14:04:38 +0000 http://blogsecurity.net/?p=12#comment-16890 [...] ^ Blog Security | Survey Finds Most WordPress Blogs Vulnerable [...] [...] ^ Blog Security | Survey Finds Most WordPress Blogs Vulnerable [...]

]]> By: SiteRiver WordPress CMS http://blogsecurity.net/wordpress/articles/article-230507/comment-page-2#comment-16559 SiteRiver WordPress CMS Tue, 16 Jun 2009 01:11:15 +0000 http://blogsecurity.net/?p=12#comment-16559 A additional security issue may be all of the “readme” and “info” and other files left behind - not just for WordPress and all the plugins and templates, but other apps as well. I recently found in my server logs two strange bots from Chinese IPs that were active looking for readme txt files. If a particular plugin or app version has a vulnerability, it certainly may be more effective to scan the txt files that could indicate versions. Just to be on the safe side I remove all of the txt files, mods descriptions, etc from any web-accessible directory for my wordpress installs. A additional security issue may be all of the “readme” and “info” and other files left behind – not just for WordPress and all the plugins and templates, but other apps as well. I recently found in my server logs two strange bots from Chinese IPs that were active looking for readme txt files. If a particular plugin or app version has a vulnerability, it certainly may be more effective to scan the txt files that could indicate versions.

Just to be on the safe side I remove all of the txt files, mods descriptions, etc from any web-accessible directory for my wordpress installs.

]]> By: Doddy http://blogsecurity.net/wordpress/articles/article-230507/comment-page-2#comment-16442 Doddy Fri, 08 May 2009 06:51:01 +0000 http://blogsecurity.net/?p=12#comment-16442 nice share mate, wow a dony know that wordpress have so many security problem. nice share mate,

wow a dony know that wordpress have so many security problem.

]]> By: WordPress Community Vulnerable « Happydad’s Weblog http://blogsecurity.net/wordpress/articles/article-230507/comment-page-2#comment-6573 WordPress Community Vulnerable « Happydad’s Weblog Thu, 24 Jan 2008 05:48:00 +0000 http://blogsecurity.net/?p=12#comment-6573 [...] Baru baca Feedreader trus menemukan kenyataan bahwa Wordpress memiliki banyak kelemahan! BlogSecurity » WordPress Community Vulnerable. Ini sangat mengerikan mengingat wordpress adalah web application paling populer saat ini. Sehingga [...] [...] Baru baca Feedreader trus menemukan kenyataan bahwa Wordpress memiliki banyak kelemahan! BlogSecurity » WordPress Community Vulnerable. Ini sangat mengerikan mengingat wordpress adalah web application paling populer saat ini. Sehingga [...]

]]> By: BlogSecurity » Blog Archive » Power Bloggers Vulnerable http://blogsecurity.net/wordpress/articles/article-230507/comment-page-2#comment-3510 BlogSecurity » Blog Archive » Power Bloggers Vulnerable Thu, 25 Oct 2007 06:28:34 +0000 http://blogsecurity.net/?p=12#comment-3510 [...] little while ago, we released the WP Vulnerability Survey. There were some ‘doubtful Tomas’ individuals, so we followed up on this article with [...] [...] little while ago, we released the WP Vulnerability Survey. There were some ‘doubtful Tomas’ individuals, so we followed up on this article with [...]

]]> By: WordPress Community Vulnerable? at john keegan dot org http://blogsecurity.net/wordpress/articles/article-230507/comment-page-2#comment-64 WordPress Community Vulnerable? at john keegan dot org Sun, 01 Jul 2007 06:44:43 +0000 http://blogsecurity.net/?p=12#comment-64 [...] site dedicated to providing useful and critical security information for the blog community”, noted the following today: BlogSecurity incrementally harvested the WordPress software version from 50 blogs; the results [...] [...] site dedicated to providing useful and critical security information for the blog community”, noted the following today: BlogSecurity incrementally harvested the WordPress software version from 50 blogs; the results [...]

]]> By: Word&Press Mu » Blog Archive » How secure is WordPress? http://blogsecurity.net/wordpress/articles/article-230507/comment-page-2#comment-63 Word&Press Mu » Blog Archive » How secure is WordPress? Sat, 23 Jun 2007 15:15:18 +0000 http://blogsecurity.net/?p=12#comment-63 [...] can not say it but read what David Kierznowski says about it. His article is few weeks old and he couldn’t now that WordPress 2.2 is not secure. [...] [...] can not say it but read what David Kierznowski says about it. His article is few weeks old and he couldn’t now that WordPress 2.2 is not secure. [...]

]]> By: bloginfosec.com » Unofficially why 49/50 Wordpress blogs are vulnerable: App Security and Dev http://blogsecurity.net/wordpress/articles/article-230507/comment-page-2#comment-62 bloginfosec.com » Unofficially why 49/50 Wordpress blogs are vulnerable: App Security and Dev Mon, 11 Jun 2007 13:04:34 +0000 http://blogsecurity.net/?p=12#comment-62 [...] was a survey conducted that said that 49/50 Wordpress blogs are running old and vulnerable versions of the [...] [...] was a survey conducted that said that 49/50 Wordpress blogs are running old and vulnerable versions of the [...]

]]> By: PhSoftware Programming Blog - PSPB » Blog Archive » Is your Blog up to date? If not, I help you to stay safe http://blogsecurity.net/wordpress/articles/article-230507/comment-page-2#comment-61 PhSoftware Programming Blog - PSPB » Blog Archive » Is your Blog up to date? If not, I help you to stay safe Fri, 08 Jun 2007 18:11:11 +0000 http://blogsecurity.net/?p=12#comment-61 [...] I just read over at BlogSecurity.com it seems that many users which host their blog independently from wordpress.com. Doesn’t [...] [...] I just read over at BlogSecurity.com it seems that many users which host their blog independently from wordpress.com. Doesn’t [...]

]]> By: Picture Perfect Paranoia»Blog Archive » 98% of Wordpress 2.x.x Vulnerable? http://blogsecurity.net/wordpress/articles/article-230507/comment-page-2#comment-60 Picture Perfect Paranoia»Blog Archive » 98% of Wordpress 2.x.x Vulnerable? Fri, 08 Jun 2007 07:46:39 +0000 http://blogsecurity.net/?p=12#comment-60 [...] those wondering, here’s the survey linked in the [...] [...] those wondering, here’s the survey linked in the [...]

]]>