On: Remote exploit found in all WooThemes

[trienthusiast]

I use a Woo theme and was hacked last week, even though my host told me it was he timthumb vulnerability.

I never receive notice to upgrade the theme in the dashboard (and the option is activated).

what do i do now ?

[jasongill → trienthusiast]

What version number is listed as the current version when you click "Update Framework" in your theme? Most likely you're being impacted by the same issue that I've posted about.

[trienthusiast → jasongill]

thanks for your reply. that's what it says: Typebased 2.3.1 Framework 2.7.22

[jasongill → trienthusiast]

Yikes, that is really out of date - the latest framework is 5.3.12. However it's not available right now because their site is down - once it comes back up, be sure to use "update framework" button in WP admin area!