Recently in WordPress Security Category

Say hello to Poker 101.  I don't normally link to sites filled with affiliate links and the like (At least I try not to.) but I'm making a big deal about this for one very good reason.

It's still there.

You see, a couple of months back, I noticed (see the comments section) that sometimes I had to resend spam reports into wordpress.com when they didn't get acted upon them.  Now, I know it's only Mark over there dealing with those reports (Lloyd used to do them as well but I noted that he got removed from that position.  At least he's no longer following up on reports any more.) but after two reports sent in previously, (and a third one in today) the site is still there.

- Affiliate links? Check
- Adverts? Check
- Content stealing? Maybe.  Copied at least.

This isn't the first time I've seen this either.  This guy had his sites up for more than a week after first questioning what the issue was.

Sure, maybe wordpress.com has a public face of being anti-splog.  We all know that previous experience shows otherwise.

I'm no longer supporting WordPress but I wanted to mention this as I had been suggesting this WordPress plugin to folks in the WordPress Multiuser forums previously.

It's been announced that the wp-forums plugin is hackable and a security risk.  Considering that the author hasn't been around much, don't expect a fix for it any time soon.

I, for one, have been suggesting folks use Simple Forum instead.  There's no import route though for you to use.

Matt and crew over at Automattic have release a new version of the Akismet Plugin for WordPress. This new version, 1.15, adds a link to the post where the spam was posted to. I've got to admit that this is the feature that I like the most as sometimes you have to sit there and decide if a comment is a spam or not. Knowing if the comment relates to the post or not will be a big help. Grab a copy today if you're running WordPress today. edit: Just noticed that the Spam Counter was missing from the footer of the theme. I went in and added it to the sidebar.

Read about it here as well as get the upgrade.

An important security issue has been brought to the attention of the WordPress team and we have worked diligently to bring you a new stable release that addresses it. Our latest version 2.0.2 contains several bugfixes and security fixes. The problems addressed are unannounced XSS issues privately discovered and reported to the WordPress team. Thanks to Mark Jaquith, Robert Deaton, and David House for assisting with this release.