«
»

WordPress 2.8.4

WordPress 2.8.4 has been released and also similar to WordPress 2.8.3, this is a security fix.

Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.

Changelog: WordPress 2.8.4
Download: WordPress 2.8.4
Download: Modified files since WordPress 2.8.3

Tags: ,

Email This Post Email This Post Print This Post Print This Post

1 Star2 Stars3 Stars4 Stars5 Stars (560 votes, average: 3.84 out of 5)

 

This entry was posted on Wednesday, August 12th, 2009 at 10:18 and is filed under WordPress. It has accumulated a total of 5,347 views. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.

11 Responses to “WordPress 2.8.4”

  1. NHL23 says:
    13th August 2009 at 01:47

    Just 2 files?

  2. Mickey says:
    13th August 2009 at 03:58

    Your blog is very helpful. I have a ton of WP blogs to update each time, and grabbing the “modified files only” makes life MUCH easier. Thanks!

  3. Inspired says:
    13th August 2009 at 09:17

    Awesome!

    Thanks for just giving the 2 files needed.

    That cuts my upgrade time by 95%.

  4. ptvGuy says:
    13th August 2009 at 09:57

    Thanks so much for all you do to make me look good to all of my clients.

  5. Lester Chan says:
    13th August 2009 at 10:30

    NHL23: Yeap.

    Mickey, Inspired, ptvGuy: You are welcome =)

  6. Melinda says:
    21st August 2009 at 11:20

    Thanks! Worked like a charm!

  7. Jim says:
    25th August 2009 at 12:24

    However, as far as I know, we can update wordpress automatically from interface right?

    So what’s the point of downloading or redownloading?

  8. Jim says:
    25th August 2009 at 12:25

    However, as far as I know, we can update wordpress automatically from interface right?

    So what’s the point of downloading or redownloading?

  9. Lester Chan says:
    25th August 2009 at 14:38

    I never trust auto upgrade. So I always delete away all the files and upload it again to avoid conflicts.

  10. Yoshi Abe says:
    18th September 2009 at 09:08

    Hi from Tokyo. I’ve just installed 2.8.4 and PostRatings on my site and works very nicely. Appreciate your work on the plug-in! I did some quick translation to Japanese for mysel and wondering if you need any help on a Japanese localization. Thanks again for a wonderful plug-in! FYI: I’m a web designer / journalist based in Tokyo who studied design in New York.

  11. Lester Chan says:
    18th September 2009 at 12:03

    Sure you can send them to my gmail account, lesterchan AT gmail DOT com. I would wish to visit Japan one day!