This plugin needs secured against TimThumb | ww.wp.xz.cn

Resolved Vince LaMonica
(@vjl323)

14 years, 9 months ago

Just a heads up that this plugin includes an older version of TimThumb, which has a major security issue in it. If you use this plugin, you should download the latest version of TimThumb at http://timthumb.googlecode.com/svn/trunk/timthumb.php though it would be good of Woo to update this plugin. 🙂

Viewing 7 replies - 1 through 7 (of 7 total)

Ryan Ray
(@ryanr14)

14 years, 9 months ago

Hey Vince,

I do believe an update has or is being pushed out right now. 🙂

Plugin Author jeffikus
(@jeffikus)

14 years, 9 months ago

Correct – V2.0.6 has the latest version.

Dani
(@tuninghost)

14 years, 9 months ago

After the latest update the thumb.php script doesn’t work anymore for me.

It generates the following error:
A TimThumb error has occured

The following error(s) occured:
Could not open the lockfile for writing an image.

Query String : src=wp-content/uploads/2011/08/toyota-supra-replica-super-gt-haotic-12.jpg&w=640px&h=&zc=1&q=90
TimThumb version : 2.8

Nothing has changed except the upgrade to 2.0.6…

Thanks

nanske
(@nanske)

14 years, 7 months ago

Where do I need to place this? (I’m not a developer)
http://timthumb.googlecode.com/svn/trunk/timthumb.php

Thread Starter Vince LaMonica
(@vjl323)

14 years, 6 months ago

TimThumb scanner states that the version that comes with the wootumblog plugin is 2.8 which is vulnerable. 2.8.2 is secure.

Plugin Author jeffikus
(@jeffikus)

14 years, 6 months ago

Hi there

I’ve just pushed a commit to the plugin to update to 2.8.2 – see http://plugins.trac.ww.wp.xz.cn/log/woo-tumblog/

Thanks,
Jeff

Server Themes
(@luuquangvu)

13 years, 10 months ago

My site: http://ketoannganha.com/
I had the same problem!
Why? Plese, help me!

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘This plugin needs secured against TimThumb’ is closed to new replies.

7 replies
6 participants
Last reply from: Server Themes
Last activity: 13 years, 10 months ago
Status: resolved