WordPress Security Vulnerabilities

Wednesday, April 9. 2008

WordPress Security Vulnerabilities

The hack in itself is very interesting. First, it attempts to be undiscovered by any human observer, but fully indexable and followable by search engines. The spam links are inserted into a block with the style: “position: absolute;overflow: hidden;height: 0;width: 0“. Second, the links point to legitimate blogs that have been compromised. These blogs not only have link spam inserted into their pages, but entire pages are created within their WordPress themes directory as landing pages to host the spam-targeted content.