Has anyone looked at milw0rm 4844 yet? It supposedly involves the Wp- FileManager plugin for WordPress, yet the download file it points to does not contain the affected file. Nor does one downloaded from johannesries.de, which is the author's site. George -- theall at tenablesecurity.com