senixon

Thanks again for your response, I understand various blogs reporting it, but there is no one place that has all the exploits?

I guess I’m paranoid like you are and have already changed the passwords to DB and asking the owner of the blog to change all the passwords for all the admins and authors as well.

I have just learned that there are hidden links peppered in the comments… this blog is not very big so I’ll do and export and then a search for anything suspicious in a text editor, then import it back in.

I already performed the upgrade and deleted all except the wp_content directory and the wp-config.php at the root. I’m going to go through the content directory and check everything in there. There seem to be to many plugin, I’ll see about deleting those as well.

thanks whooami, I was 99% certain this user wasn’t suppose to be there, just thought it may have been some sort of system account or something.

Anyhow the user is now gone, as well as all the random generated user names.

Do you know if there is a some sort of database of reported attacks someplace. I’m afraid I may have missed something and it would be nice to check against known issues.