by Nick
Friday, May 25, 2007 5:03 AM
This obviously doesn't affect me, but does potentially affect many of the other blogs I read:
Security analyst David Kierznowski shocked bloggers yesterday with a survey showing that 49 out of the 50 WordPress blogs he checked seem to be running exploitable versions of the widely used software. He said, 'The main concern here is the lack of security awareness amongst bloggers with a non-technical background, and even those with a technical background.' Mr Kierznowski also uncovered recent vulnerabilities in WordPress plugins that ship by default with the software, adding: 'WordPress users developing plugins must be aware of the security functions that WordPress supports, and ensure that these functions are used in their code.'
So if you run WordPress on your own domain, check your version and upgrade if you are running anything less than 2.0.10 or 2.2.
