22
2011
WordPress News: WordPress.org Password Reset
Today, the team from WordPress.org noticed something suspicious with several popular plugins: AddThis, WPtouch, and W3 Total Cache. It appears that someone found a way to commit fake, “new” versions of these plugins that included well-hidden backdoors. Luckily, the WordPress team is on the ball and quickly discovered there was a problem. They were able to remove the fake versions and roll back these plugins to the real versions. As an added precaution, they have reset all passwords on WordPress.org. So if you have any accounts on WordPress.org please be aware of this, and I strongly recommend to change your password to something completely new after the reset.
The WordPress.org team is still investigating exactly how this security breakdown occurred. As soon as I hear any updates I’ll be sure to post them here.
Read the full post from WordPress.org here – WordPress.org Password Reset Story

An article by Dana

