WordPress.org

Posted a reply to No undo option?!?, on the site WordPress Support Forums:
Sorry to hear that happened. I agree, an extra warning would be good, and I'll…

4 years ago

Posted a reply to Hackers trying to exploit cg-tvs-admin-panel, on the site WordPress Support Forums:
Hey Mike - Thanks for the heads up! I think what's going on here is…

5 years ago

Posted a reply to Wist List forTimthumb Vulnerability Scanner, on the site WordPress Support Forums:
Ah. Valid points Amanda. I'll get to work. Thanks!

5 years ago

Posted a reply to Wist List forTimthumb Vulnerability Scanner, on the site WordPress Support Forums:
Hey Amanda - Great points! I think these could (and maybe should) both be implemented,…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP, on the site WordPress Support Forums:
Just to be clear, we all agree with AITPro. There was never an argument about…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP, on the site WordPress Support Forums:
Interesting stuff in that search. Lesson learned: Make sure your files are not directly accessible,…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP, on the site WordPress Support Forums:
Ah. Makes sense. I'll definitely get those pages locked down - regardless of whether or…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP, on the site WordPress Support Forums:
The randomly generated code is there - it's in a hidden input with a name…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP, on the site WordPress Support Forums:
After reading further on the second nonce link, it appears that check_admin_referer() is used for…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP, on the site WordPress Support Forums:
Alright - after looking through the code (it's been a while since I wrote this/thought…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Code Mods ASAP, on the site WordPress Support Forums:
Thanks for the heads up, AITPro! The plugin has been taken down for now, but…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] can't get into wp-admin, on the site WordPress Support Forums:
Hey Superten - Sorry about that! I havent really done any testing with multisite. I'd…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Always finds 2 vulnerable files, on the site WordPress Support Forums:
Mark, what's likely happened is: The scanner plugin tried to fix itself (it flagged itself…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Get 404 when attempt to update, install latest versions wit, on the site WordPress Support Forums:
Man, that is really weird - I'm at a loss as to what could be…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Get 404 when attempt to update, install latest versions wit, on the site WordPress Support Forums:
Where are you seeing the 404 - on activation? Can you tell me who you're…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Always finds 2 vulnerable files, on the site WordPress Support Forums:
Hey Wil - That's baffling. Do you, by chance, have a nonstandard wp-content location?

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Always finds 2 vulnerable files, on the site WordPress Support Forums:
Hey Guys - Sorry about the mess! I'm guesing this is because you're working on…

5 years ago

Posted a reply to Timthumb Vulnerability Scanner Plugin INVALID ARGUMENT, on the site WordPress Support Forums:
Sorry guys - Version 1.52 takes care of this. Thanks!

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Found Vulnerability in plugin directory, on the site WordPress Support Forums:
DMX, I at least verified that this happens on Windows installations, but I've updated the…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Not recognizing TimThumb 2.8.10 as latest version, on the site WordPress Support Forums:
Sorry guys - the problem was that 2.8.10 looked older than 2.8.5 (because 1 is…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Version 1.51 bug - error warning when no timthumbs, on the site WordPress Support Forums:
Should be fixed with 1.52. Sorry it took me so long to get to this,…

5 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Bug - rewrites old settings, on the site WordPress Support Forums:
I almost forgot - For the last few versions (I dont know since when off…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Bug - rewrites old settings, on the site WordPress Support Forums:
Unfortunately, at this point, the plugin isn't smart enough to maintain settings, only to update…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Bug on homepage, on the site WordPress Support Forums:
Sorry about that, (big) oversight on my part. It is fixed with version 1.51.

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Not updating to 2.8.4 or 2.8.5, on the site WordPress Support Forums:
Alright guys, you should start seeing requests to update the plugin on your sites shortly,…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Not updating to 2.8.4 or 2.8.5, on the site WordPress Support Forums:
Hey Guys - Really sorry about this - I got wrapped up in some other…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] 2.8 version reported as vulnerable, on the site WordPress Support Forums:
This is sort of a loaded subject. The main vulnerability, which caused all of the…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Not updating to 2.8.4 or 2.8.5, on the site WordPress Support Forums:
A couple of points: The script that was keeping the version up to date (which…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] 311 characters of unexpected output upon activation, on the site WordPress Support Forums:
Hey Guys - When the plugin is first activated, it sends a request to my…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] False positive in WooThemes Canvas theme-options.php, on the site WordPress Support Forums:
@madaboutu - no, not normal, but I haven't been able to figure out exactly why…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem, on the site WordPress Support Forums:
I'm guessing (hoping) that's the case, as I'm running out of ideas for how that…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem, on the site WordPress Support Forums:
Hey Sneader - On the site that had the problem most recently - did you…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Timthumb scanner plugin broken, on the site WordPress Support Forums:
This is an issue with php 4 servers. I can get you a copy that…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Latest upgrade v1.4 throws fatal error:, on the site WordPress Support Forums:
Sorry about that! Made a silly mistake while committing the new version. Versions 1.42 and…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem, on the site WordPress Support Forums:
Hey Sneader - First of all, thanks for all the help - it's hugely appreciated.…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem, on the site WordPress Support Forums:
My inexperience with SVN strikes again. Unfortunately, I managed to not add in a few…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem, on the site WordPress Support Forums:
That's not good. I'll see what I can find out.

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem, on the site WordPress Support Forums:
Hey Guys - Sorry I was so late on this - it ended up being…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem, on the site WordPress Support Forums:
Hey Guys - Sorry, I got wrapped up last week, and didn't get to this.…

6 years ago

Posted a reply to [Plugin: Timthumb Vulnerability Scanner] Does not use latest timthumb.php to "fix" problem, on the site WordPress Support Forums:
So it is. While the problem isn't nearly the same magnitude that the original problem…

6 years ago