3 ms·
Topically enough, I just found out[1] the importance of the themes point. A wordpress theme that had been installed on my wife's blog (not even the one she was
by kemayo 15y ago
Topically enough, I just found out[1] the importance of the themes point. A wordpress theme that had been installed on my wife's blog (not even the one she was actually using) included a file for thumbnail generation[2] which had a security hole found in it in August.
I just noticed that my second link goes to the same website as this article. :)
[1]: http://davidlynch.org/blog/2011/12/vulnerable/ http://davidlynch.org/blog/2011/12/vulnerable/
[2]: http://markmaunder.com/2011/08/01/zero-day-vulnerability-in-many-wordpress-themes/ http://markmaunder.com/2011/08/01/zero-day-vulnerability-in-...
- ricardobeat 15y agoTimThumb is widely used not only in WP. Plugins are way more dangerous, themes don't usually include external libraries or complex code/services.