Remove Timthumb after Malware Attack

3 posts from 3 voices

• Started 5 months ago by mehrblick
• Latest reply from Dude
• This topic is not a support question

Tags:

No tags yet.

1. 

   mehrblick
   Member

   Hello,

   We had a Malware Attack on every Kriesi Theme. People told me that it's because of Timthumb.
   Are there plans to replace timthumb in all of your themes?

   Thank you

   Posted 5 months ago #
2. 

   Ismael
   Moderator

   Hi,

   I am not so sure if Kriesi used TimThumb on themes other than display. There are means to protect your site by updating to the latest TimThumb 2.0 version. There are also malware scanners specifically for TimThumb plugin.

   http://wordpress.org/extend/plugins/timthumb-vulnerability-scanner/

   Let me tag the rest of the support team.

   Regards,
   Ismael

   Posted 5 months ago #
3. 

   Dude
   Dude

   Display is compatible with the latest version of timthumb. You can find the source code here: http://timthumb.googlecode.com/svn/trunk/timthumb.php

   That said Display 2.0.3 already comes with timthumb v2.8 and this version is secure - only timthumb v1.x was not secure and hackers could use it to attack the server.

   Posted 5 months ago #

RSS feed for this topic

Reply

You must log in to post.