by
WordPress 2.8.4 – Security Release
WordPress 2.8.4 – Security Release
I have the impression that those who develop WordPress, they started to hurry. In the last month, I think there were more three versions de WordPress.
latest version, WordPress 2.8.4 (August 12, 2009), fixes a security issue.
Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.
Install with confidence…until next week, I think two more versions will appear.
WordPress 2.8.4 – Security Release
You may also be interested in...
