News for hackers. Stuff that matters.

A comment on Remote exploit found in all WooThemes. Parent comment

Re:Remote exploit found in all WooThemes by masklinn on Sunday April 29, 2012 @05:02AM (#3905552)
And one of the authors commented the issue was patched... apparently discretely without notifying any user that they're at risk.
[ Parent | on HN ]
Re:Remote exploit found in all WooThemes by marklindhout on Sunday April 29, 2012 @05:31AM (#3905586)
All the glory of closed source development back in action!
[ Parent | on HN ]
Re:Remote exploit found in all WooThemes by damncabbage on Sunday April 29, 2012 @08:26AM (#3905819)
Apparently it wasn't fixed (or at least the fix hasn't been released to customers yet): https://gist.github.com/2523147#gistcomment-288527

(Gist author posts a longer explanation, and mentions this as part of his message.)

[ Parent | on HN ]
Re:Remote exploit found in all WooThemes by jasongill on Sunday April 29, 2012 @08:36AM (#3905842)
It appears that they wrote a fix but then (the next day, I believe) had their server troubles. During that mix-up, the file which alerts the theme that there is an update was broken, so their patch basically hasn't "been released" to their existing customers yet.
[ Parent | on HN ]