Hacker News Reader

lloydbuddon Tell HN : Wordpress.com exploit

Awesome comments and advice. My co-workers are working on this.

lloydbuddon Tell HN : Wordpress.com exploit

Specific to WordPress.com.

Not a general bug in WordPress or WordPress MU.

lloydbuddon Tell HN : Wordpress.com exploit

Yes. Updated my profile, but don't believe what you read on the interwebs ;-)

lloydbuddon Tell HN : Wordpress.com exploit

WordPress.com team is investigating the issue. They have disabled the vector while they continue to investigate.

lloydbuddon Tell HN : Wordpress.com exploit

Does seem a little tricky to find.

security at wordpress.org Listed at http://core.trac.wordpress.org/

Members of WordPress.com are on that mailing list as well.

http://en.support.wordpress.com/contact/ if anything is definitely WordPress.com specific, but I suggest always including security at wordpress org, because there may be another permutation to the attack.