WordPress 2.8.4: Security Release

11 Aug, 2009

WordPress 2.8.4: Security Release

Posted by: fedmich In: Freelance works

Aww, we need to upgrade again I guess… annoying indeed

from wordpress admin:

Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.

We fixed this problem last night and have been testing the fixes and looking for other problems since then. Version 2.8.4 which fixes all known problems is now available for download and is highly recommended for all users of WordPress.

Tags: Admin Account, Attacker, freelance, Password Reset, Remote Access, Security Check, Security Release, Vulnerability, wordpress

245 views, 1 so far today

No Responses to "WordPress 2.8.4: Security Release"

Comment Form

WagKupal: If your expectations is so high, please don't get Niceprint. But at the same time, please raise your budget to get the topnotch wedding photographers
ClariceWILDER: If you are in the corner and have got no cash to move out from that, you will need to receive the
Haze: ^^' taken pala yun... wrong grammar hehehe
Haze: I guess we just need to let our suppliers of our concerns prior to the wedding day so as not to take the risk of being a casualty. :) if you have a
Haze: charisse sent me this email when I told her re my concern: hi i have already seen the female network blog. sad to say, no matter what company owne
fedmich: Streaming is now available :) Check it out