dano1066

The thread of hackers is becoming a bigger concern every day. As tools get smarter and faster, it has become much easier for websites to get hacked. Often the hack can be performed by an automated tool if it discovers that your site has some pretty simple vulnerabilities. Quite often people don’t know of these security back doors or may have overlooked something that seems insignificant, but can actually be a back door into your system.
This plugin will perform a scan of your WordPress site along with the settings and configurations available to the underlying code to check for any vulnerabilities in your webserver. If an issue is detected the plugin will advise you the best course of action to take in order to resolve the issue.

System Vulnerability Scanner

Can be difficult to remember everything, even when you know what needs to be done. Handy to have this explain it all.

Valuable for setting up new servers

This plugin will scan your Wordpress site in order to check if there are settings and configurations with your web server, PHP or with wordpress that  …

Peter Butler

The recent Timthumb.php vulnerability (discussed <a href="http://markmaunder.com/2011/08/02/technical-details-and-scripts-of-the-wordpress-timthumb-php-hack/" rel="nofollow ugc">here</a>) has left scores of unsuspecting bloggers hacked. It’s the perfect combination of not so easy to fix for the technically disinclined, and easy to find and exploit for the malicious – resulting in a disastrous number of compromised sites.
The Timthumb Vulnerability Scanner plugin will scan your entire wp-content directory for instances of any outdated and insecure version of the timthumb script, and give you the option to automatically upgrade them with a single click. Doing so will protect you from hackers looking to exploit this particular vulnerability.
After new, lesser vulnerabilities were found, it became apparent that the plugin needs to be dynamic – able to keep you up to date with the latest version of timthumb, without requiring a plugin upgrade. The plugin now checks for the latest available version of timthumb routinely (each time you visit the scanner page, but no more than once a day), and can download and install the latest version, rather than the one included with the plugin. Scans are run daily (unless you disable them via the options link on the scanner page) via wp-cron to keep up with any new plugins or themes you’ve installed.
More info at <a href="http://codegarage.com/blog/2011/09/wordpress-timthumb-vulnerability-scanner-plugin/" rel="nofollow ugc">CodeGarage</a>.
Special thanks to <a href="http://jacobwg.com/" rel="nofollow ugc">Jacob Gillespie</a> for help with the bulk upgrade feature.

Timthumb Vulnerability Scanner

Scans your wp-content directory for vulnerable instances of timthumb.php, and optionally upgrades them to a safe version.

System Vulnerability Scanner vs Timthumb Vulnerability Scanner