Comments on: WordPress 2.2 Security Hole: Identity Theft http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/ Free software engineer & wannabe videomaker Sun, 29 Jan 2012 13:35:17 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Lloyd Buddhttp://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/comment-page-1/#comment-4753 Lloyd Budd Mon, 02 Feb 2009 14:05:02 +0000 http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/#comment-4753 Releasing this as part of WordPresss 2.2.1 is a top priority. Releasing this as part of WordPresss 2.2.1 is a top priority.

]]> By: UeberTs Thoughts » strange accesses to Wordpress register pagehttp://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/comment-page-1/#comment-4394 UeberTs Thoughts » strange accesses to Wordpress register page Thu, 11 Sep 2008 09:24:13 +0000 http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/#comment-4394 [...] wonder if it has to do with the current security hole (is there already an exploit ?), an earlier for Wordpress 2.2 or simply spam [...] [...] wonder if it has to do with the current security hole (is there already an exploit ?), an earlier for WordPress 2.2 or simply spam [...]

]]> By: Hindsight… It’s is a wonderful thing! « Lee Kelleher’s Webloghttp://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/comment-page-1/#comment-4061 Hindsight… It’s is a wonderful thing! « Lee Kelleher’s Weblog Fri, 18 Jul 2008 23:03:16 +0000 http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/#comment-4061 [...] to say, WordPress 2.2 has an ugly security hole which allows hackers to remotely inject SQL statements into the database.  I’d heard about [...] [...] to say, WordPress 2.2 has an ugly security hole which allows hackers to remotely inject SQL statements into the database.  I’d heard about [...]

]]> By: Nesshttp://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/comment-page-1/#comment-3418 Ness Sat, 16 Feb 2008 15:47:23 +0000 http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/#comment-3418 Good heavens. I just removed that version thingy! Good heavens. I just removed that version thingy!

]]> By: kevhttp://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/comment-page-1/#comment-3192 kev Sun, 07 Oct 2007 23:35:07 +0000 http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/#comment-3192 <blockquote>Do yourself a huge favor and take the version number out of your templates</blockquote>I totally agree with you Tyler. This should be a strong recommandation to any template maker.BTW, starting from <a href="http://getk2.com/2007/09/k2-release-candidate-1/" rel="nofollow">RC1</a>, <a href="http://getk2.com" rel="nofollow">K2</a> (the theme I use on this blog) will <a href="http://code.google.com/p/kaytwo/source/detail?path=/trunk/footer.php&r=432" rel="nofollow">no longer show the Wordpress version number</a> to the user. Sadly, it will be still there in the html code. So it's a good start but not a solution at all... :(

Do yourself a huge favor and take the version number out of your templates

I totally agree with you Tyler. This should be a strong recommandation to any template maker.

BTW, starting from RC1, K2 (the theme I use on this blog) will no longer show the WordPress version number to the user. Sadly, it will be still there in the html code. So it’s a good start but not a solution at all… :(

]]> By: Tylerhttp://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/comment-page-1/#comment-3117 Tyler Thu, 23 Aug 2007 23:54:18 +0000 http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/#comment-3117 Do yourself a huge favor and take the version number out of your templates, no one really needs to know what you're running. People will just google for vulnerable versions, and can even automate the attack. Do yourself a huge favor and take the version number out of your templates, no one really needs to know what you’re running. People will just google for vulnerable versions, and can even automate the attack.

]]> By: mhmhttp://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/comment-page-1/#comment-3046 mhm Tue, 17 Jul 2007 13:04:37 +0000 http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/#comment-3046 very interesting very interesting

]]> By: Prevent Wordpress hacking » Sha dot Com Anak Melayu boleh blog! Mana gadis manis melayu aku?http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/comment-page-1/#comment-2992 Prevent Wordpress hacking » Sha dot Com Anak Melayu boleh blog! Mana gadis manis melayu aku? Wed, 27 Jun 2007 01:47:29 +0000 http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/#comment-2992 [...] to Wordpress v2.2.1, please do so immediately. There has been bloggers on v2.2 like Hongkiat and coolkevman, who got hacked. The hackers search for blogs with v2.2 keyword string and did their worse. You [...] [...] to WordPress v2.2.1, please do so immediately. There has been bloggers on v2.2 like Hongkiat and coolkevman, who got hacked. The hackers search for blogs with v2.2 keyword string and did their worse. You [...]

]]> By: Don’t get hacked! » Sha Money Maker dot comhttp://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/comment-page-1/#comment-2990 Don’t get hacked! » Sha Money Maker dot com Wed, 27 Jun 2007 00:05:36 +0000 http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/#comment-2990 [...] to Wordpress v2.2.1, please do so immediately. There has been bloggers on v2.2 like Hongkiat and coolkevman, who got hacked. The hackers search for blogs with v2.2 keyword string and did their worse. You [...] [...] to WordPress v2.2.1, please do so immediately. There has been bloggers on v2.2 like Hongkiat and coolkevman, who got hacked. The hackers search for blogs with v2.2 keyword string and did their worse. You [...]

]]> By: PsychoPhil - Drink More Beerhttp://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/comment-page-1/#comment-2973 PsychoPhil - Drink More Beer Fri, 22 Jun 2007 21:18:07 +0000 http://kevin.deldycke.com/2007/06/wordpress-22-security-hole-identity-theft/#comment-2973 [...] Wordpress 2.2 Security Hole: Identity Theft (tags: security wordpress software internet) - Posted in del.icio.us by del.icio.us   trackback [...] [...] WordPress 2.2 Security Hole: Identity Theft (tags: security wordpress software internet) – Posted in del.icio.us by del.icio.us   trackback [...]

]]>