A few days ago my WordPress installation was hacked. This is not a big surprise, since I haven’t been keeping up with the releases as they came out, and there have been a lot of security bugfixes along the way.
The hack was also very subtle, or it didn’t really accomplish a whole lot. I am not entirely sure what to make of it. But the exploit basically involved using the WordPress upload functionality to drop a PHP script into my /tmp directory, and also to ensure that it would always be run when a WordPress page was rendered.
Fortunately, when this happened, it broke certain parts of my website, so it became obvious pretty quickly. Also, fortunately, I keep a week’s worth of backups around, so if I catch a problem right away then I can roll back my installation to the day before the problem.
So that’s what I did this time; I rolled back my website software to before the hack, then I applied the latest and greatest upgrades, and finally I went through some of the “site-hardening” guides for making it much harder to hack these pieces of software.
We shall see if it actually solves the problems! And I for one will be much more diligent about applying upgrades when they come out…