Support

1. spidaman
   

   ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

   Posted: 2008-04-07 15:58:43

   We're following up on our post regarding a problem affecting thousands of WordPress blogs, Patch or Upgrade Your Wordpress Installation, Now. WordPress has since released version 2.5 however, we've noticed that a large number of blogs remain vulnerable to the security issue addressed by the 2.3.3 release.

   Blogs that have been compromised by this security vulnerability are typified by having links to spam destinations inserted onto the blog page. These link insertions may be invisible to casual observations; the links are often obscured by style attributes that render them invisible. These links are still seen by crawlers such as Technorati's, Google's and Yahoo's. You can find these links by viewing the source of the blog pages or, when using Firefox, looking under "Tools" -> "Page Info" -> "Links". Blogs hosted on wordpress.com are not affected by this issue; only blogs hosted on their own installations of WordPress from wordpress.org require concern.

   Because of this ongoing problem, we're discontinuing processing crawls of blogs that exhibit common symptoms of being compromised. We strongly recommend upgrading your WordPress installation. Even if you haven't been afflicted by a compromise, by the time you are aware that you have been a number of negative consequences have already occurred (for instance, flagged spam by Technorati, Google or Yahoo!) -- this has been reported by many WordPress users.

   If you have questions about installing WordPress or maintaining a WordPress installation, please refer to the WordPress Forums.

2. OnFrozenBlog
   

   ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

   Posted: 2008-04-07 18:04:29

   We are planning on upgrading our WordPress blog to the latest version after the Stanley Cup Playoffs. I checked our links and we are, at the moment, not compromised.

   "We're discontinuing processing crawls of blogs that exhibit common symptoms of being compromised. "

   Are we safe, or are we not being processed because we are running version of WordPress that is vulnerable?

   We will keep an eye on the links until we upgrade after the playoffs.

   Thank you in advance for the notice and information.

   -The OFB Team

3. gillers
   

   ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

   Posted: 2008-04-07 20:12:09

   Hi, thanks for the heads-up email. I've now upgraded my blog (http://nikkeiview.com) to Wordpress v2.5 as a result.

4. psionmark
   

   ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

   Posted: 2008-04-07 22:38:01

   Have updated all my blogs now to 2.5

5. frantic
   

   ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

   Posted: 2008-04-07 23:38:27

   my site, franticindustries.com, has been manually patched. Unless a new vulnerability is found, it's just as safe as the latest WP version (probably safer).

6. fzelders
   

   ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

   Posted: 2008-04-08 00:05:17

   I am not able to upgrade the particular blog http://www.fzelders.nl/weblog.
   HOWEVER... that blog is FROZEN: No new content is added, no comments are added. Every possibility to change the contents of the database is diabled.
   SO... Dont worry. (The blog is visited very often however, so I would be very disappointed if you excluded that blog from the technorati collection.)

   1 Question:
   You say: "We're discontinuing processing updates from blogs that exhibit symptoms of being compromised."
   My question: What symptoms do you see regarding to the blog you mentioned in the e-mail that you did send yesterday (18 times by the way!) ?
   I HOPE you do NOT make a decision that is based on the WP-version used. THAT would be very easy and not hounest, because many bloggers will have taken measures to disable the consequences of the WP-vulnerabilities you talked about.

7. ceslava
   

   ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

   Posted: 2008-04-08 00:21:29

   I've been having problems with the updates of my posts too in two of my blogs version 2.5

   http://pqpq.es
   http://justtellmewhy.com

   I'll really appreciate getting this fixed.

8. Andiz
   

   ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

   Posted: 2008-04-08 01:30:04

   I have had the same problem on several blogs. The solution that I came up with is the following:

   Chmodding the index.php files to 444. This stopped my blogs from being compromised. (I do realize that this is only a temporary solution.)

   And it's also worth mentioning that also one of my vBulletin forums had the same problem.

9. robillo
   

   ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

   Posted: 2008-04-08 01:32:36

   Thanks for the heads-up! I've now upgraded the last of my blogs (www.mindanaobloggers.com) to WP2.5. And yes, the blog did have that problem, those spam links that appeared at the bottom of the footer area. One of the members of the blog got curious why the site fell from PR5 to PR3 and so started investigating. Oh boy....

10. ceslava
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-04-08 03:00:31

    Hi,

    I´ve checked the code and I haven´t found any strange link but still my posts are not updated:

    http://pqpq.es
    http://justtellmewhy.com

    I'll really appreciate getting this fixed.

11. crazyleaf
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-04-08 03:59:32

    It happened to me. There's a easy way around it. Remove from your cpanel write permissions to header.php and footer.php.

12. justacio
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-04-08 05:52:11

    does this explain why Ping doesn't seem to be working for my site right now? both post that have gone up this week won't show up on my list of "Latest posts"

13. justacio
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-04-09 13:22:29

    we've cleaned up the hidden spam in our header and footer, but the Ping still won't index our site. we're planning to upgrade but just need a couple more weeks to get an inhouse server up, running and tested.

    In the mean time, how do we get back in Technorati's good graces so our site can be indexed again?

14. dunn
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-04-13 10:38:26

    Thank's for the notification email. Had upgraded to WP 2.5
    http://www.simplydunn.net

15. czzz
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-04-14 13:36:02

    Hi Technorati-Team,

    thank you for your alertness and the personal email to me.
    I have updated my Blog
    http://www.zintzen.org
    to WP 2.5, updated all Plugins, checked the pages for hidden links,
    and can confirm I am "clean".
    Please take me into normal "rotation" again,
    thanks, czzz.

16. bleuken77
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-04-15 01:14:32

    i'm using WP2.5 but still can't claim blog bcoz "URL is not indexable", my site: http://bleuken.truefreehost.com

    maybe technorati don't like wordpress in free web hosting sites!? What's the problem?

17. simplyvigne
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-04-16 23:32:04

    download the WP-Security-Scan plugin for WordPress

18. nitrosaint
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-04-18 02:39:28

    My blogs are updated (2.5) but still I receive the same problem, technorati does not index my blog.

    But few months ago, one of my subdomains was spammed (WP MU) but I already resolved the problem. Could this be a reason why technorati was not able to index my blog? How can I resolve this?

19. Davecat
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-04-22 20:01:34

    'Shouting to hear the echoes' (http://www.kuroneko-chan.com/echoes) has been sucessfully upgraded to WordPress 2.5, and with surprisingly minimal loss of life. Thanks for the notification Email!

20. yuri83
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-04-24 05:22:57

    i no ave link of spam etc in my page/blog, wordpress is 2.5, conflict of "extreme" security? (wp-noversion, index blank on plugin etc.)

21. dheditor
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-05-15 15:58:52

    http://deannahoak.com has been updated. Thanks for the heads-up.

22. aftercollabz
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-05-19 08:13:05

    I can't update wordpress to 2.5 in this time.I just finished searching for ave links or spam and there isn't any kind of spam on the page.
    Here's my blog - http://nocommunication.bloghub.org My last updated post is from about a month ago.
    I'll really appreciate getting this fixed.

23. nikonman
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-06-01 06:00:09

    I've been having problems with the updates of my posts too although I have upgrade to WP 2.5. 1.
    About 4 days without indexing, updating....
    Where is the bug?

    http://www.pracadarepublicaembeja.net/

24. lozil
    

    ATTN WORDPRESS USERS: Vulnerable WordPress Blogs Not Being Indexed

    Posted: 2008-06-11 01:14:27

    I also have the same ping problem

    http://free-and-useful.blogspot.com