You may or may not have heard that a recent security flaw was discovered in the TimThumb script which many WordPress themes use to generate thumbnails. This was a serious flaw that simply couldn't be ignored and as such we have made a collection of some of the most popular theme developers responses to the situation so you can know whether your theme was affected and if you need to update.
- WooThemes – TimThumb script has been patched for the flaw
- StudioPress & Genesis – Use internal image resizing thus not affected
- DIYThemes Thesis – Does not contain the vulnerable part of TimThumb code
- Headway Theme – Has been updated to remove vulnerability (Verified by email)
Whilst this is just a small section of the theme market you should be aware that many hundreds of themes have been using the TimThumb script so if you are not sure whether your theme contains the code or you know that it does but aren't sure whether it's been updated then you can contact the theme developer and point them to the new and improved TimThumb 2.0 script that addresses the vulnerability as well as adding some extra functionality.
