[Plugin: WP-Property – WordPress Powered Real Estate and Property Management] Shell backdoor Trojan

At the very least you should do the following:

1) Create a blank file (using notepad or a similar text editor) – rename the file index.php and place it in the wp-content/uploads folder

2) Also create a .htaccess file (also with notepad – rename it manually after saving to .htccess) with the following code and place it in the same folder:

order allow,deny
deny from all

Options All -Indexes

3) Also – If at all possible use SSL.

.htaccess is essential!!!
(If you let me have an e-mail address – I can send you these files) – use the contact form on my website – click my name next to this comment)

Does this work for nginx too?

Uploadify has been removed from the current version of this plugin. You need to update.

@ditikos

You can secure nginx:

location /wp-content/content/ {
                	location ~ \.php$ {
                        	deny all;
                        }
                }

Above will prevent access to php file from web-browser. Applications that use old style-ajax may break (but its better they break today than rather create havoc tomorrow!)