Blog

[…] a fellow WordPress blogger Mike sent me an article that was written by 5thirtyone which reminds users that you have to be careful where you download your WordPress themes from. I […]

[…] in the default RSS feed on the WP admin page of almost every WordPress-driven site) and found this post from an open-source theme developer. It seems that some of his themes had been swallowed up by a […]

[…] in the default RSS feed on the WP admin page of almost every WordPress-driven site) and found this post from an open-source theme developer. It seems that some of his themes had been swallowed up by a […]

[…] 5thirtyone.com talks about care in downloading themes, explaining how one was hacked. Digging into the malicious code chunk myself, I found that the code goes out and loads a file from one of three sites (logging the visit as well, by the way). Once loaded, the code can be either displayed on the blog, or actually executed. […]