WordPress IGIT Related Post With Thumb Plugin, WordPress IGIT Posts Slider Widget Plugin

ソフト名：WordPress IGIT Related Post With Thumb Plugin 3.x, WordPress IGIT Posts Slider Widget Plugin 1.x (TimThumb 1.34未満)

回避策：3.9.8以降へのアップデートにて対応, 1.2へのアップデートにて対応

脆弱性：システムアクセス, PHPファイルのアップロード, PHPコード実行

ソース：

http://wordpress.org/extend/plugins/igit-related-posts-with-thumb-images-after-posts/

http://wordpress.org/extend/plugins/igit-posts-slider-widget/

http://wordpress.org/extend/plugins/igit-related-posts-with-thumb-images-after-posts/changelog/

http://plugins.trac.wordpress.org/changeset?reponame=&new=422562%40igit-related-posts-with-thumb-images-after-posts&old=384217%40igit-related-posts-with-thumb-images-after-posts

http://wordpress.org/extend/plugins/igit-posts-slider-widget/changelog/

http://plugins.trac.wordpress.org/changeset?reponame=&new=438275%40igit-posts-slider-widget&old=354036%40igit-posts-slider-widget

http://secunia.com/advisories/45416/

http://secunia.com/advisories/46015/

http://secunia.com/advisories/46018/

http://dvw-j.blogspot.com/2011/08/timthumb.html

危険性：High Risk