Affected versions: 2.1.x, more?

First seen: December 2007

Symptoms include:

• All plugins deactivated
• All pages changed to posts

Solutions

Have the host delete the relevant txt file in /tmp

Check the uploads path (settings / miscellaneous)

more detail needed

Upgrade Restore Backup Database

If you have no backup, you can try the following SQL to help return posts to pages.

UPDATE wp_posts SET post_type = 'page' WHERE post_parent !=0

UPDATE wp_posts SET post_type = 'page' WHERE menu_order<>'0'

Reactivate plugins

Remove damaged files. (More detail needed)

See also

• User:Here/Exploits -- Other known exploits
• http://wordpress.org/support/topic/141041
• http://iboughtamac.com/2008/03/28/protecting-wordpress-from-magic-include-shell/