An Executable File Was Found In The WordPress Uploads Directory
Submitted by Chrysostomos Daniel on December 5, 2011 - 10:48 am 5 CommentsAlert group:
Executable file found
WebsiteDefender test:
During this test WebsiteDefender checks the Uploads directory for executable files.
Repercussions:
By default, it is not possible to upload PHP or other executable files into the WordPress uploads directory. Hackers might upload malicious executable files into the Uploads directory purely because in a typical WordPress installation it’s the only directory with write permissions assigned; meaning it is the only directory that can run vulnerable or malicious code. The presence of an executable file in the uploads directory may indicate that your WordPress security was compromised. If the executable was uploaded without authorization then a malicious might have placed and executed it. If this is the case, then the malicious user could also have full access rights to the site and might gain full control of the web server. Depending on the hazardous nature of the executable file, your WordPress blog might be at serious risk of being used for further attacks.
Fix:
1 Trackbacks/Pingbacks
- Pingback: Fix stuck pixel With Pixel Exerciser 1.1.0.0 | Daily Freeware Download on December 8, 2011
4 Comments
Post a comment
Add your comment below, or trackback from your own site. You can also subscribe to these comments via RSS. Be nice. Keep it clean. Stay on topic. No spam.
So, almost every site I have shows this issue where I have CAPTCHA installed for use with “Contact Form 7″ in WordPress. I look into this file and a php file exists with one line of code and nothing that looks like an exe file. Ideas?
Hi Aaron,
In “web terms” a PHP file is an executable file.
I’ve noticed the same repeated messages about Contact Form 7. Perhaps the plugin keeps downloading new CAPTCHA issues? Is anyone aware of any vulernabilities with Contact Form 7? Anything that should be done to tighten up security…..short of using another plugin?
meant CAPTCHA “images” not “issues”