diff --git a/WordPress-Security-Tips.md b/WordPress-Security-Tips.md index 4c7ac08..2721603 100644 --- a/WordPress-Security-Tips.md +++ b/WordPress-Security-Tips.md @@ -28,9 +28,9 @@ Add this line in the 'php.ini' file. error_reporting = off ``` -**7. Ensure any TimThumb files are up to date.** +**7. Remove any TimThumb files.** -TimThumb is a small php script for cropping, zooming and resizing web images which many WordPress themes use. In 2011 a Remote Code Execution vulnerability was found to affect it and was actively exploited. This vulnerability has been fixed in recent versions of TimThumb. If your WordPress theme uses the TimThumb script ensure that it is the latest version. +TimThumb is a small php script for cropping, zooming and resizing web images which many WordPress themes use. In 2011 a Remote Code Execution vulnerability was found to affect it and was actively exploited. The lead developer has since dropped the project. **8. Use a login lockdown plugin.**