WordPress wipes passwords after plugin hack

By on
WordPress wipes passwords after plugin hack

Users told to update plugins.

WordPress has reset all user passwords following the compromise of several popular plugins used on the content management platform.

The plugin author accounts were allegedly hacked and WordPress staff had noticed "cleverly disguised backdoors" in some of the applications.

"We determined the commits were not from the authors, rolled them back, pushed updates to the plugins, and shut down access to the plugin repository while we looked for anything else unsavoury," founder Matt Mullenweg said on a blog.

"We’re still investigating what happened, but as a prophylactic measure we’ve decided to force-reset all passwords. To use the forums, trac, or commit to a plugin or theme, you’ll need to reset your password to a new one."

He said those who use the AddThis, WPtouch, or W3 Total Cache plugins should upgrade each version from the user update page.

Copyright © SC Magazine, Australia

Tags:

Most Read Articles

You must be a registered member of iTnews to post a comment.
| Register

Poll

New Windows 10 users, are you upgrading from...
Windows 8
Windows 7
Windows XP
Another operating system
Windows Vista
How should the costs of Australia's piracy scheme be split?
Rights holders should foot the whole bill
50/50
ISPs should foot the whole bill
Government should chip in a bit
Other
View poll archive

Whitepapers from our sponsors

What will the stadium of the future look like?
What will the stadium of the future look like?
New technology adoption is pushing enterprise networks to breaking point
New technology adoption is pushing enterprise networks to breaking point
Gartner names IBM a 'Leader' for Disaster Recovery as a Service
Gartner names IBM a 'Leader' for Disaster Recovery as a Service
The next era of business continuity: Are you ready for an always-on world?
The next era of business continuity: Are you ready for an always-on world?

Log In

Username:
Password:
|  Forgot your password?