A critical vulnerability in the TimThumb WordPress plugin version 2.8.13 may invoke a call to ‘Webshot’. This feature would have to be enabled in order for an attacker to exploit this vulnerability.

“With a simple command, an attacker can create, remove and modify any files on your server,” says security experts at Sucuri in a blog post.

All of our current web hosting customers have had their website(s) source code reviewed. We did not find any website vulnerable to this attack.

For any questions, comments, or concerns, please open a support ticket @ http://support.forimpression.com

Updating WordPress can be a simple task. However, it can also go awry. We are happy to help you with performing an update to your WordPress website.
Read more →

WordPress is a powerful CMS (Content Management System) that allows users to create websites and/or blogs. Much like purchasing a car, you are given options to enhance the base functionality. However, depending on specific server configuration, you may or may not be prompted to enter in your FTP (File Transfer Protocol) credentials when installing a new plugin or theme.

Read more →