Tell me more ×
WordPress Answers is a question and answer site for WordPress developers and administrators. It's 100% free, no registration required.
up vote 1 down vote favorite

I found that my blog posts are inserted lot's of ad links, I'm using WordPress 2.9.2, is there a known security vulnerability in it?
A screenshot : I post some codes on my blog, the ad links are inserted into them.

enter image description here

I delete them by hand several days ago, and I found that they're back again!

share|improve this question
2  
We're now at 3.1.3 and there were many minor versions since 2.9.2 due to vulnerabilities. – ign Jun 6 '11 at 11:30
1  
@ign although, to be fair, something like this is more likely the fault of cheap/insecure hosting. I don't remember any of the security releases fixing a hole big enough to allow this kind of a hack. – John P Bloch Jun 6 '11 at 13:14
Agreed, not blaiming WP. Just saying that you can't even discard that since he's running a one year old build, like @TheDeadMedic said. – ign Jun 6 '11 at 13:52

1 Answer

up vote 5 down vote accepted

Looks like you've been hacked. In all fairness, you're running a version that is over a year old - it's always best practice to upgrade as soon as you can.

I would advise reading through the FAQ on the codex. I also stumbled across this rather concise step-by-step, though I would advise it's for the intermediate user (use of SQL and FTP is required).

share|improve this answer
1  
You should also notify your host. Most of the security patches since 2.9.2 relate to logged-in users. None would allow this level of injection. Poorly-coded plugins or theme might let this in but the most likely cause is insecure hosting. If this blog is in a shared-hosting environment it is important that the host is notified. – Elpie Jun 6 '11 at 15:02
OK, I updated my wordpress to the latest version...waiting for the hacking come again.. – wong2 Jun 6 '11 at 15:29

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.