Hackers inserted harmful code in WordPress distributives

10th March 2007

Unknown hackers broke server of a popular platform for making WordPress blogs and added harmful code into WordPress distributives, which can be downloaded from the site. Engine creator Meg Mullenweg reported about cracking of WordPress, warning that all distributives of WordPress 2.1.1. downloaded in the past 3-4 days, are necessary to be replaced by version 2.1.2, in the infected files are changed. Administration of the project became aware of server cracking via email. In the letter which was sent by unknown to the secure mailbox, it was reported that harmful code was inserted into the WordPress. The investigation revealed that hackers made changes in the two files of the distributives 2.1.1. allowing to de remote performance of PHP-code and get free access to the server, using software WordPress. Now the distributives of WordPress 2.1.1 is temporarily suspended.