Worm attacking WordPress – Watch Out!
WordPress has posted a blog article regarding a worm going around the internet actively looking for a security vulnerability in all Wordpress blogs before version 2.8.3. The worm itself exposes itself in a couple of ways: Strange additions to permalinks, such as example.com/category/post-title/%&(%7B$%7Beval(base64_decode($_SERVER%5BHTTP_REFERER%5D))%7D%7D|.+)&%/. The keywords are “eval” and “base64_decode.” A “back door” was created by a “hidden” Administrator. Check your site us
More: continued here
Tags: Blog, Blogs, internet, US, WordPress