Is there a way to know if my current WordPress theme is using the infamous TimThumb plugin?

1 Answer 1


One option is to install a security plugin. Most scan for Tim Thumb throughout your whole file structure, including themes (and will also search for many other types of vulnerabilities if you've been hacked, as your "hacked" tag indicates).

You can also search for files named "timthumb" in your theme directory, or search for the phrase "timthumb" in all files on your site. It helps if you have a local copy and a good editor that will search through files.

  • We are running Sucuri's plugin and firewall
    – Riccardo
    Sep 6, 2019 at 13:52
  • Sucuri specifically states they scan for TimThumb, so you'll be notified if it creeps into your site.
    – WebElaine
    Sep 6, 2019 at 13:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.