Hacker News Reader

You can download the latest version of WooFramework here: http://cl.ly/2a3j1m351C3u2i0t122j (it is 5.3.10)

Are you seriously suggesting downloading the fix for vulnerability from some random website?

No, the update pops up within your WordPress admin panel in case you are using one of the WooThemes themes. That download is behind a login, this zip is publicly available for all people that didn't believe it was already fixed.

I use a Woo theme and was hacked last week, even though my host told me it was he timthumb vulnerability.

I never receive notice to upgrade the theme in the dashboard (and the option is activated).

what do i do now ?

What version number is listed as the current version when you click "Update Framework" in your theme? Most likely you're being impacted by the same issue that I've posted about.

thanks for your reply. that's what it says: Typebased 2.3.1 Framework 2.7.22

Yikes, that is really out of date - the latest framework is 5.3.12. However it's not available right now because their site is down - once it comes back up, be sure to use "update framework" button in WP admin area!

Reply on news.ycombinator.com