Month: July 2009

WordPress 2.8.2 has just been release. WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site. Changelog: WordPress 2.8.2 Download: WordPress 2.8.2 Download:…

WordPress 2.8.1 has been released. WordPress 2.8.1 fixes many bugs and tightens security for plugin administration pages. Core Security Technologies notified us that admin pages added by certain plugins could be viewed by unprivileged users, resulting in information being leaked. Not all plugins are vulnerable…