WordPress.org

Ready to get started?Download WordPress

Forums

WooTumblog
[resolved] This plugin needs secured against TimThumb (8 posts)

  1. Vince LaMonica
    Member
    Posted 2 years ago #

    Just a heads up that this plugin includes an older version of TimThumb, which has a major security issue in it. If you use this plugin, you should download the latest version of TimThumb at http://timthumb.googlecode.com/svn/trunk/timthumb.php though it would be good of Woo to update this plugin. :-)

  2. ryanr14
    Member
    Posted 2 years ago #

    Hey Vince,

    I do believe an update has or is being pushed out right now. :)

  3. jeffikus
    Member
    Plugin Author

    Posted 2 years ago #

    Correct - V2.0.6 has the latest version.

  4. tuninghost
    Member
    Posted 2 years ago #

    After the latest update the thumb.php script doesn't work anymore for me.

    It generates the following error:
    A TimThumb error has occured

    The following error(s) occured:
    Could not open the lockfile for writing an image.

    Query String : src=wp-content/uploads/2011/08/toyota-supra-replica-super-gt-haotic-12.jpg&w=640px&h=&zc=1&q=90
    TimThumb version : 2.8

    Nothing has changed except the upgrade to 2.0.6...

    Thanks

  5. nanske
    Member
    Posted 2 years ago #

    Where do I need to place this? (I'm not a developer)
    http://timthumb.googlecode.com/svn/trunk/timthumb.php

  6. Vince LaMonica
    Member
    Posted 2 years ago #

    TimThumb scanner states that the version that comes with the wootumblog plugin is 2.8 which is vulnerable. 2.8.2 is secure.

  7. jeffikus
    Member
    Plugin Author

    Posted 2 years ago #

    Hi there

    I've just pushed a commit to the plugin to update to 2.8.2 - see http://plugins.trac.wordpress.org/log/woo-tumblog/

    Thanks,
    Jeff

  8. Server Themes
    Member
    Posted 2 years ago #

    My site: http://ketoannganha.com/
    I had the same problem!
    Why? Plese, help me!

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic