Comments on: Upgrade WordPress or risk getting flagged as badware by Google

By: Craig Mullins

Craig Mullins — Thu, 11 Sep 2008 22:17:26 +0000

The hacks a pain in the ass…

If you know the date you made posts look in phpmyadmin for file changes. Usually it will change a few at one time. For me it only changed a few pots on the front page.

It also usually create several sub directories and puts in a few static pages in the wp-content area…

Then your going to need to look at your theme & plugin files because it changes all of them.

just upgrading isn’t enough. Because it uploads files on to your server to allow it in again… Need to find all the changes files..

The thing that sucks is once you tel Google you are fixed and you not.. Google will take forever to verify it again.. Maybe several months…

By: Justin

Justin — Sun, 07 Sep 2008 06:30:28 +0000

Great info, I had no idea that this was even occurring on an old blog of mine. I guess its absolutely essential to stay on top of the WordPress updates.

By: Weber

Weber — Sat, 06 Sep 2008 09:26:10 +0000

This is something that makes wordpress less admin-friendly than blogs like blogspot.

By: rob

rob — Fri, 29 Aug 2008 18:43:09 +0000

Yeah I agree to some extent, but there are always other ways that devious hackers can find out your WordPress version and its vulnerabilities.

In all likelihood their automated bots attempt to perform the hack without ever checking the WordPress version – which is why it’s good to upgrade

By: Alex

Alex — Fri, 29 Aug 2008 18:33:28 +0000

Look in your blog’s source code for this meta tag:

^ If I were you I’d remove that link. Keeping that thing around is a great way for hackers to find out what vulnerabilities you might have lying around.

By: » Effects of being flagged as badware in Google | Pagespank.com - web 0.0

Wed, 27 Aug 2008 20:55:35 +0000

[...] a quick note further to my post on wordpress and badware risks; the blog that this happened on had all of its PageRank withdrawn, which has just been [...]

By: Paul

Paul — Mon, 14 Jul 2008 04:31:42 +0000

Thanks for the help. I found that nasty spam and zapped it off my site. will be upgrading soon to the latest WP version. I have a lot of PHP edits to files for SEO reasons and to integrate the blog into my existing site so I’m not looking forward to the task.

Thanks again, you made it a lot easier to find and zap.

By: Navier

Navier — Fri, 23 May 2008 07:25:00 +0000

This is something that makes wordpress less admin-friendly than blogs like blogspot.

You have to update, otherwise google gets on your bad site mwahahah!

The vulnerability is XSS (cross site scripting)…i can’t believe wordpress has these holes

By: rob

rob — Tue, 20 May 2008 08:33:19 +0000

Look in your blog’s source code for this meta tag:

By: Bob

Bob — Tue, 20 May 2008 01:56:02 +0000

How can you tell what version you have?