A worm is circulating that can post malware and spam to some WordPress blogs using outdated versions of the blogging software, according to a post by Matt Mullenweg, founding developer of WordPress.

The worm can be tough to catch, as Mullenweg explains: “it registers a user, uses a security bug (fixed earlier in the year) to allow evaluated code to be executed through the permalink structure, makes itself an admin, then uses JavaScript to hide itself when you look at users page, attempts to clean up after itself, then goes quiet so you never notice while it inserts hidden spam and malware into your old posts.”

The vulnerability allowing the attack was discovered August 11, at which point WordPress encouraged users to upgrade to version 2.8.4. However, many people have yet to upgrade, and reports online indicate the worm is making dubious progress by the hour.

For TV addicts it could be the ultimate remote control: a 7-inch portable touchscreen that can not only control gadgets in the living room but also check out and what’s playing on channels other than the one currently showing on the big screen.

A concept of the product is on show this week at the IFA electronics fair in Berlin, and the double viewing feature is enabled by dual tuners in the main television. One tuner is dedicated to the TV and another is used to tune in channels to be shown on the remote control. An 802.11n WiFi link connects the two devices.

In its most basic mode, one tab displays buttons to control the TV, while a second tab shows a TV guide application. The user can browse information about what’s on TV or watch an alternate channel on the remote control. The channel can be displayed full screen if the user wishes, so the device can double as a secondary television.