Topic: timthumb vulnerability and BuddyPress · BuddyPress.org

Skip to:: Content; Pages; Categories; Search; Top; Bottom

timthumb vulnerability and BuddyPress

@pisanojm

Participant

13 years, 4 months ago

Is the BuddyPress plugin affected by the timthumb.php vulnerability, beyond what would be found in a theme?

Ref:

http://wpmu.org/timthumb-zero-day-vulnerability-affects-hundreds-of-wordpress-themes/

Viewing 2 replies - 1 through 2 (of 2 total)

@karmatosed

Moderator

13 years, 4 months ago

Timthumb would be theme side not plugin side. The fix is fairly easy to any theme that does have it however most won’t and use featured images / built in WordPress functions that do similar things.

@djpaul

Keymaster

13 years, 4 months ago

BuddyPress Default does not use timthumb.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘timthumb vulnerability and BuddyPress’ is closed to new replies.