New WordPress 2.8.2 Released

This new version of WordPress fixes a cross-site scripting (XSS) vulnerability. The comment author URLs were not fully sanitized when displayed in the admin area. This vulnerability could be exploited to redirect you away from the admin to another site. You can upgrade WordPress automatically and in a few seconds. Just…

Continue reading

WordPress 2.8.1 Released

Great news! WordPress 2.8.1 was finally released! This version fixes many bugs and improves security for the plugin administration pages. Core Security Technologies notified the WordPress team that admin pages added by some plugins could be viewed by unprivileged users, resulting in information being leaked. Not all plugins are vulnerable to this problem, however they advise upgrading…

Continue reading