Lester Chan's WordPress Plugins
Lester Chan's WordPress Plugins Development Blog
Dougal has put up a list of what to expect in WordPress 2.9: Here is the list: Post Thumbnails: add an image to be automatically displayed with the post in various views (main page, archives, etc.). The WordPress logo on this post is added with…
WordPress 2.8.4 has been released and also similar to WordPress 2.8.3, this is a security fix. Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password…
WordPress 2.8.3 has been released and similar to WordPress 2.8.2, this is a security fix. Unfortunately, I missed some places when fixing the privilege escalation issues for 2.8.1. Luckily, the entire WordPress community has our backs. Several folks in the community dug deeper and discovered…
WordPress 2.8.2 has just been release. WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site. Changelog: WordPress 2.8.2 Download: WordPress 2.8.2 Download:…
WordPress 2.8.1 has been released. WordPress 2.8.1 fixes many bugs and tightens security for plugin administration pages. Core Security Technologies notified us that admin pages added by certain plugins could be viewed by unprivileged users, resulting in information being leaked. Not all plugins are vulnerable…