wordpress默认主题TwentyTen存在漏洞

9500pro · 发表于 2011-8-2 22:22:55

这几天有几个wordpress 博客被黑过，都是放在虚拟主机上的，也没有太在意，都有备份。但是今天有一个虚拟主机商发了封邮件给我

This is to inform that our Server has detected a vulnerability and exploits in Wordpress default theme called "TwentyTen". Wordpress has not yet fixed this hole. In order to prevent any unauthorized activity on your Wordpress Blog, kindly follow Steps as under :

1) Upgrade to latest version of Wordpress by going to Updates Menu from your Dashboard.

2) Delete the theme called "Twenty Ten" from Appearance >> Themes.

3) Delete unwanted themes and plugins.

4) Keep your password strong using special characters. Go generate, click http://strongpasswordgenerator.com/

wordpress默认主题TwentyTen存在漏洞，奇怪的是，我不用默认主题，但是默认主题没有删除，这也能被黑？

[ 本帖最后由 9500pro 于 2011-8-2 22:24 编辑 ]

ixbear · 发表于 2011-8-2 22:42:28

靠啊，我一直在用默认的TwentyTen主题。。。

citydog · 发表于 2011-8-2 22:44:36

9500pro · 发表于 2011-8-2 22:45:31

这是哪个虚拟主机商我就不写了，倒是蛮敬业的，相比H9要好很多！昨天发邮件给我，说我站被黑了，他不说我倒还不知道，刚才又发了这封邮件给我！

四师兄 · 发表于 2011-8-2 22:46:26

标记关注

lemss · 发表于 2011-8-2 23:50:52

我去看看

有个就好 · 发表于 2011-8-2 23:54:26

Mark

wdlth · 发表于 2011-8-3 00:29:04

404.php杯具

timothyye · 发表于 2011-8-3 00:58:37

不错，敬业的主机商

誓誓 · 发表于 2011-8-3 01:01:22

求详情

		自动登录	找回密码
密码			注册

[疑问] wordpress默认主题TwentyTen存在漏洞