Wordpress Compromised

Again, my wordpress installation has been compromised. Spammers are just fond of it.

I found hidden code in wp-blog-header.php, a new user in the database and a few dozen templates I couldn’t even modify few files on the server (virus?) even with sufficient rights!!

So, I had to install a fresh copy of wordpress and hand-pick few items here and there to migrate.

Let’s see how long this installation stands