Agreed, but that alone wouldn't be enough. If you read into what the hack does on the forums [1], it actually downloads and installs a backdoor that can execut

Agreed, but that alone wouldn't be enough. If you read into what the hack does on the forums [1], it actually downloads and installs a backdoor that can execute arbitrary commands on your server. Unless a new version explicitly looks for and removes those files, updating is not enough. [1] http://forum.piwik.org/read.php?2,97666 http://forum.piwik.org/read.php?2,97666