There Is No Such Thing As WordPress 2.6.4

UPDATE: WordPress 2.6.5 has been released. This is still no legitimate version 2.6.4 and there never will be.

As of the time of this post, there is no such thing as WordPress 2.6.4. There also likely never will be as 2.7 will be the next version of WordPress assuming no emergency security fixes are needed before it comes out.

If you “upgraded” to “2.6.4”, then you have installed a fake trojan version (full description is here and here), you should delete your wp-admin and wp-includes folders and replace them with fresh copies downloaded from, the official site. If you have a recent database backup from before you upgraded, I would also advise dumping your database and using that backup just to be safe. You should also of course change all of your WordPress user account passwords.

Please be smart when it comes to WordPress! Because it’s so immensely popular, it has become the target of spoofers and hackers. Always type in the URL to the official site (rather than using a link and not paying attention) if you are trying to download the latest version.

12 thoughts on “There Is No Such Thing As WordPress 2.6.4

  1. Pingback: WordPress Wednesday News: WordPress 2.7 Beta 2, Danger WordPress Faker, and More WordCamps | The Blog Herald

  2. Pingback: Warning: Fake WordPress Malicious Site « Lorelle on WordPress

  3. Pingback: Beware of this fake WordPress malicious site! « Bloguear por bloguear…

  4. Pingback: WordCast 35: Typing with Whisks | WordCast - The web's best podcast on WordPress and blogging

  5. Looks like the folks at wordpress have decided to skip wordpress 2.6.4 and go straight to 2.6.5 which was just released today due to security and other bug fixes. you can read the full post and get the new version on the site.

    read the blog here:

    it’s sad that it’s come to this for the open source world. That programs such as wordpress become targets for hackers.


  6. Pingback: WordPress 2.6.5 - Security and Bug Fix Released | (Anti) Social Development

  7. Pingback: Episode 48: WordPress 2.6.5 released, Mark Jaquith on 2.7, WordPress Direct controversy - The WordPress Community

  8. Pingback: WordPress News: WordPress 2.7 Out on, WordPress 2.7 News, WordCamps, WordPress Plugins and Themes Updated | The Blog Herald

  9. Pingback: Blog Herald WordPress News: WordPress Scholarship, 800,000 WordPress 2.7 Downloads, XML-RPC Problem, and Top Plugin Authors « Lorelle on WordPress

  10. Pingback: Downadup Spreads - Infects 1 in 16 PCs | The Blog Herald

  11. That’s why it’s always a good idea to update from the WordPress site itself, luckily for us the new versions allow for us to auto-update without downloading, uploading and installing the mods on our own. Good looking out, a simple google search returns many sites running the ‘trojan’d’ 2.6.4 version…

Leave a Reply