[wp-hackers] Hacked blogs

[Peter Westwood]

On 26 Mar 2009, at 16:22, Mike Schinkel wrote:

> I too fixed a site that had this iframe problem, but it was a v2.6  
> site.  I know this was asked implicitly but let me ask again  
> explicitly; is there any chance that these hacked sites shared any  
> of the same plugins?  As Mark Jaquith tweeted about recently, plugin  
> as a group are generally not written with good security practices in  
> mind; maybe there's a huge security hole in a shared plugin?

Also as an aside.

Do this sites share anything else in common?

Are they all on shared servers?
What other webapps are installed?

westi
-- 
Peter Westwood
http://blog.ftwr.co.uk | http://westi.wordpress.com
C53C F8FC 8796 8508 88D6 C950 54F4 5DCD A834 01C5