Open-source scripts are a great because they come with so much functionality, and have zero development costs for you. However, one caveat with using these open-source scripts is that exploits and vulnerabilities affect a large portion of users – which may include you. These exploits are commonly called worms, hacks, virus attacks, vulnerabilities, and so on, but the underlying issue is that your script installation gets compromised.
One very popular script is WordPress, and the big worm that attacked the WordPress community affects pre-2.8.4 versions of WordPress. The WordPress exploit is detailed in the WordPress development blog:
The tactics are new, but the strategy is not. Where this particular worm messes up is in the “clean up” phase: it doesn’t hide itself well and the blogger notices that all his links are broken, which causes him to dig deeper and notice the extent of the damage. Where worms of old would do childish things like defacing your site, the new ones are silent and invisible, so you only notice them when they screw up (as this one did) or your site gets removed from Google for having spam and malware on it.
The only way to keep ahead of exploits like this is to keep upgrading and patching WordPress. 2.8.4, the current version of WordPress, is not affected by this WordPress hack. Our advice is to upgrade WordPress. If you’re using our hosting plans, we provide a free script installer that can install a fresh, new version of WordPress for you. If you’re already on WordPress and need to upgrade, simply go to Tools > Upgrade and click on Upgrade Automatically and you’ll be upgraded to the latest version of WordPress automatically.
Senior Tech Writer for Vodien Internet Solutions
Bill Poh is the Senior Tech Writer at Vodien and he covers web hosting, online marketing, social media, business and the latest tech innovations. When not writing, he’s busy pursuing his passion for photography, graphic design, and creative arts.
Here are some of the other pages created by Bill Poh: