wordpresslogoYesterday, we shared with you the unfortunate news of the outdated WordPress blogs (that are not running the latest version) might be attacked by a potential worm.  The only real solution/step to avoid being attacked by this latest worm is to upgrade to the latest version. Having said that, you might be wondering how would you detect that your WordPress blog security hasn’t been compromised. Well in this post, we will be sharing with you how to do that. As you probably know that this attack creates and registers an unsolicited administrator account. So you need to check whether there is any extra admin account for your WordPress account or not. This can be done through a simple SQL query. You need to run this query against your MySQL WordPress DB. There are a couple of ways to run this query which are:

  1. Go to phpMyAdmin , Select your WordPress database and then go to the ‘SQL’ tab to run the query.
  2. Run the query mentioned below directly in the command-line MySQL client (Recommended for Advanced users).

The query is

SELECT u.ID, u.user_login FROM wp_users u, wp_usermeta um
WHERE u.ID = um.user_id  AND um.meta_key = ‘wp_capabilities’ AND um.meta_value LIKE ‘%administrator%’;
Let us hope that none or at most minimum WordPress blogs have been affected.