In reply to Miroslav Glavic.

This was the plugin recommended for the past vulnerabilities but it hasn't been updated for a long time http://wordpress.org/plugins/timthumb-vulnerability-scanner/