Devil Works

Shoemoney has posted today about a potential security bug in Wordpress.

If you have a standard Wordpress install and go to http://yourdomain.com/wp-content/plugins then you will see a directory listing of the files in the directory and not an actual web page.

I haven’t heard of any exploits occurring because of this but it doesn’t take much to fix.

Just create a blank file in notepad or something similar, save it as index.php and upload it to your /wp-content/plugins directory.

Now I just have to go and update my other four Wordpress sites