Vladimir Kolesnikov

Like any other software WordPress does have bugs and security vulnerabilities. They get fixed when the developers become aware of them. 
However, sometimes several WordPress releases are vulnerable. The problem is that the developers do not backport security updates to older WordPress releases. 
As a result, those who do not want to upgrade their WordPress installations (for example, because newer WP releases tend to consume more system resources and 
upgrade may result in having to use more expensive hosting) remain vulnerable.
ICS Security Fixes is the plugin for those who do not upgrade their WordPress: the plugin tries to fix known WordPress vulnerabilities 
at that remaining compatible with as many old WordPress releases as possible. 
And though it cannot fix all known vulnerabilities, it makes older WordPress installations more secure.
<h3>Warning</h3>
This plugins requires that PHP 5 be installed. PHP 4 is not supported.

ICS Security Fixes

The plugin tries to fix known WordPress vulnerabilities for older WordPress versions. Warning: For PHP 5 only.

Peter Butler

The recent Timthumb.php vulnerability (discussed <a href="http://markmaunder.com/2011/08/02/technical-details-and-scripts-of-the-wordpress-timthumb-php-hack/" rel="nofollow ugc">here</a>) has left scores of unsuspecting bloggers hacked. It’s the perfect combination of not so easy to fix for the technically disinclined, and easy to find and exploit for the malicious – resulting in a disastrous number of compromised sites.
The Timthumb Vulnerability Scanner plugin will scan your entire wp-content directory for instances of any outdated and insecure version of the timthumb script, and give you the option to automatically upgrade them with a single click. Doing so will protect you from hackers looking to exploit this particular vulnerability.
After new, lesser vulnerabilities were found, it became apparent that the plugin needs to be dynamic – able to keep you up to date with the latest version of timthumb, without requiring a plugin upgrade. The plugin now checks for the latest available version of timthumb routinely (each time you visit the scanner page, but no more than once a day), and can download and install the latest version, rather than the one included with the plugin. Scans are run daily (unless you disable them via the options link on the scanner page) via wp-cron to keep up with any new plugins or themes you’ve installed.
More info at <a href="http://codegarage.com/blog/2011/09/wordpress-timthumb-vulnerability-scanner-plugin/" rel="nofollow ugc">CodeGarage</a>.
Special thanks to <a href="http://jacobwg.com/" rel="nofollow ugc">Jacob Gillespie</a> for help with the bulk upgrade feature.

Timthumb Vulnerability Scanner

Scans your wp-content directory for vulnerable instances of timthumb.php, and optionally upgrades them to a safe version.

ICS Security Fixes vs Timthumb Vulnerability Scanner