WordPress.org

Posted a reply to "No undo option?!?", on the site WordPress Support Forums:
Sorry to hear that happened. I agree, an extra warning would be good, and I'll…

1 year ago

Posted a reply to "Hackers trying to exploit cg-tvs-admin-panel", on the site WordPress Support Forums:
Hey Mike - Thanks for the heads up! I think what's going on here is…

2 years ago

Posted a reply to "Wist List forTimthumb Vulnerability Scanner", on the site WordPress Support Forums:
Ah. Valid points Amanda. I'll get to work. Thanks!

3 years ago

Posted a reply to "Wist List forTimthumb Vulnerability Scanner", on the site WordPress Support Forums:
Hey Amanda - Great points! I think these could (and maybe should) both be implemented,…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP", on the site WordPress Support Forums:
Just to be clear, we all agree with AITPro. There was never an argument about…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP", on the site WordPress Support Forums:
Interesting stuff in that search. Lesson learned: Make sure your files are not directly accessible,…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP", on the site WordPress Support Forums:
Ah. Makes sense. I'll definitely get those pages locked down - regardless of whether or…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP", on the site WordPress Support Forums:
The randomly generated code is there - it's in a hidden input with a name…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP", on the site WordPress Support Forums:
After reading further on the second nonce link, it appears that check_admin_referer() is used for…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP", on the site WordPress Support Forums:
Alright - after looking through the code (it's been a while since I wrote this/thought…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP", on the site WordPress Support Forums:
Thanks for the heads up, AITPro! The plugin has been taken down for now, but…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] can't get into wp-admin", on the site WordPress Support Forums:
Hey Superten - Sorry about that! I havent really done any testing with multisite. I'd…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Always finds 2 vulnerable files", on the site WordPress Support Forums:
Mark, what's likely happened is: The scanner plugin tried to fix itself (it flagged itself…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Get 404 when attempt to update, install latest versions wit", on the site WordPress Support Forums:
Man, that is really weird - I'm at a loss as to what could be…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Get 404 when attempt to update, install latest versions wit", on the site WordPress Support Forums:
Where are you seeing the 404 - on activation? Can you tell me who you're…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Always finds 2 vulnerable files", on the site WordPress Support Forums:
Hey Wil - That's baffling. Do you, by chance, have a nonstandard wp-content location?

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Always finds 2 vulnerable files", on the site WordPress Support Forums:
Hey Guys - Sorry about the mess! I'm guesing this is because you're working on…

3 years ago

Posted a reply to "Timthumb Vulnerability Scanner Plugin INVALID ARGUMENT", on the site WordPress Support Forums:
Sorry guys - Version 1.52 takes care of this. Thanks!

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Found Vulnerability in plugin directory", on the site WordPress Support Forums:
DMX, I at least verified that this happens on Windows installations, but I've updated the…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Not recognizing TimThumb 2.8.10 as latest version", on the site WordPress Support Forums:
Sorry guys - the problem was that 2.8.10 looked older than 2.8.5 (because 1 is…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Version 1.51 bug - error warning when no timthumbs", on the site WordPress Support Forums:
Should be fixed with 1.52. Sorry it took me so long to get to this,…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Bug - rewrites old settings", on the site WordPress Support Forums:
I almost forgot - For the last few versions (I dont know since when off…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Bug - rewrites old settings", on the site WordPress Support Forums:
Unfortunately, at this point, the plugin isn't smart enough to maintain settings, only to update…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Bug on homepage", on the site WordPress Support Forums:
Sorry about that, (big) oversight on my part. It is fixed with version 1.51.

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Not updating to 2.8.4 or 2.8.5", on the site WordPress Support Forums:
Alright guys, you should start seeing requests to update the plugin on your sites shortly,…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Not updating to 2.8.4 or 2.8.5", on the site WordPress Support Forums:
Hey Guys - Really sorry about this - I got wrapped up in some other…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] 2.8 version reported as vulnerable", on the site WordPress Support Forums:
This is sort of a loaded subject. The main vulnerability, which caused all of the…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Not updating to 2.8.4 or 2.8.5", on the site WordPress Support Forums:
A couple of points: The script that was keeping the version up to date (which…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] 311 characters of unexpected output upon activation", on the site WordPress Support Forums:
Hey Guys - When the plugin is first activated, it sends a request to my…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] False positive in WooThemes Canvas theme-options.php", on the site WordPress Support Forums:
@madaboutu - no, not normal, but I haven't been able to figure out exactly why…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem", on the site WordPress Support Forums:
I'm guessing (hoping) that's the case, as I'm running out of ideas for how that…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem", on the site WordPress Support Forums:
Hey Sneader - On the site that had the problem most recently - did you…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Timthumb scanner plugin broken", on the site WordPress Support Forums:
This is an issue with php 4 servers. I can get you a copy that…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Latest upgrade v1.4 throws fatal error:", on the site WordPress Support Forums:
Sorry about that! Made a silly mistake while committing the new version. Versions 1.42 and…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem", on the site WordPress Support Forums:
Hey Sneader - First of all, thanks for all the help - it's hugely appreciated.…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem", on the site WordPress Support Forums:
My inexperience with SVN strikes again. Unfortunately, I managed to not add in a few…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem", on the site WordPress Support Forums:
That's not good. I'll see what I can find out.

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem", on the site WordPress Support Forums:
Hey Guys - Sorry I was so late on this - it ended up being…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem", on the site WordPress Support Forums:
Hey Guys - Sorry, I got wrapped up last week, and didn't get to this.…

3 years ago

Posted a reply to "[Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem", on the site WordPress Support Forums:
So it is. While the problem isn't nearly the same magnitude that the original problem…

3 years ago