WordPress 2.6.3

WordPress 2.6.3 is out, it fixes a Snoopy class vulnerability.

A vulnerability in the Snoopy library was announced today. WordPress uses Snoopy to fetch the feeds shown in the Dashboard. Although this seems to be a low risk vulnerability for WordPress users, we wanted to get an update out immediately. 2.6.3 is available for download right now. If you don’t want to download the whole release to get the security fix, you can download the following two files and copy them over your 2.6.2 installation.

Replace these 2 files:

  1. wp-includes/class-snoopy.php
  2. wp-includes/version.php

Download full version:

1 Star2 Stars3 Stars4 Stars5 Stars (43 votes, average: 3.79 out of 5)