Tue, Dec 18 2012 22:51
bradley
Well that's lovely
The wordpress side of the blog is being rebuilt - again - due to having found a lovely file that allows for GUI access to the server. wp-xml.php
http://blog.hacktalk.net/wso-2-5-shell-released/
Now digging into the root cause and testing/code auditing the rest of the wordpress install.
I don't claim to be an expert in securing wordpress sites by any means, and will certainly be looking to hire someone to do a through review, but trying to keep that site secure is a near full time job some days.
Filed under: Security
![[There's a reason that Yoda is the unofficial mascot of SBS. Size indeed matters not.]](http://www.sbslinks.com/images/headertop.png "There's a reason that Yoda is the unofficial mascot of SBS. Size indeed matters not!")