PictPress Thumbs is a WordPress plugin for dynamically resizing images, maintaining a cache of resized images separate from the images themselves. It is part of the new PictPress implementation. Read the rest of this entry »
I am working on a complete rewrite of my PictPress plugin for WordPress. PictPress is intended for a way of working where you upload images to your website outside the WordPress admin user interface, e.g. via ftp, shared directories, etc. PictPress offers an easy way of including these images in a new post. Read the rest of this entry »
It just came to my attention that PictPress 0.91 has a vulnerability for website attacks caused by an unvalidated argument to the resize.php script. As far as I know this vulnerability has been fixed from version 0.99 upwards. All users of the older version should upgrade or remove the plugin from their website.
If there are still vulnerabilities in the newer versions, please let me know.