The exploit on timthumb has been fixed and we are using the latest stable release. It feels a bit harsh of you to give me a one star review because of that.
1* is a bit harsh, but I am pleased that it was pointed out.
The recent TimThumb vulnerability is fixed, but TimThumb itself is an abandoned project, and the project’s end-of-life was announced on September 27, 2014.
You can read about it here:
http://www.binarymoon.co.uk/2014/09/timthumb-end-life/
Brief summary though, the words of the actual developer of TimThumb:
If you’re a WordPress developer and still using TimThumb then you are ‘doing it wrong’. As such I am dropping all future support and maintenance for TimThumb.
Yup. We’re planning a new release that replaces Timthumb with the standard WP functionality soon. 🙂
Hi d4mation & gecko_guy
I just wanted to give you both an update: By next week Friday, the basic version will not have timthumb included. We’ve already started phasing it out. http://www.wpgmaps.com/were-phasing-out-timthumb/
Nice, well played @wpgmaps
Goodbye SoreThumb 😉
Timthumb has now been completely removed from the plugin 🙂
Hey, I only just now noticed this. I wanted to thank you for the new release and apologize for coming across so rudely. All the devs on that project were freaking out when we saw TimThumb on the server.
I’ve updated the review accordingly 😀
