Category: Site

WordPress 2.5.1 has been released. It includes a number of bug fixes, performance enhancements, and one very important security fix.

If you are interested in only the security fixes, just replaced the following files.

1. /wp-includes/pluggable.php
2. /wp-admin/includes/media.php
3. /wp-admin/media.php

There are more than 70 bugs and performance fixes in 2.5.1, here is an outline of it:

• Performance improvements for the Dashboard, Write Post, and Edit Comments pages.
• Better performance for those who have many categories
• Media Uploader fixes
• An upgrade to TinyMCE 3.0.7
• Widget Administration fixes
• Various usability improvements
• Layout fixes for IE

WordPress 2.5 has been released and WordPress.org has a refreshed look based on WordPress 2.5 new redesigned administration backend.

New User Features in WordPress 2.5

• Cleaner, faster, less cluttered dashboard
• Dashboard Widgets
• Multi-file upload with progress bar
• Bonus: EXIF extraction
• Search posts and pages
• Tag management
• Password strength meter
• Concurrent editing protection
• Few-click plugin upgrades
• Friendlier visual post editor
• Built-in galleries

New Developer Features in WordPress 2.5

• Salted passwords
• Secure cookies
• Easy taxonomy and URL creation
• Inline documentation
• Database optimization
• $wpdb->prepare()
• Media buttons
• Shortcode API

Download: WordPress 2.5

I have upgraded this site to WordPress 2.5.

WordPress 2.3.3 has been released and this release includes a security fix (xmlrpc.php) and 3 minor bug fixes.
3 bug fixes as follows (Ctrl C + Ctrl V from WordPress Trac):

• gettext fails to determine byteorder on 64bit systems with php5.2.1
• some registration emails fail in 2.3.1 b/c of “callout verification”
• maybe_create_table call to config.php issue

5 files changed (Thanks to whooami):

• /wp-admin/install-helper.php
• /wp-includes/gettext.php
• /wp-includes/pluggable.php
• /wp-includes/version.php
• /xmlrpc.php

Get WordPress 2.3.3 now.

WordPress 2.3.2 has been released and this release includes a number of changes including one security fix.

• Performance improvements for post sanitization when raw content is required.
• Changes to is_admin() to ensure that it is only true for admin pages thereby protecting against exposing draft posts.
• Suppression of database errors unless WP_DEBUG is true.
• Check for valid database connection information during install and display and error if the install fails due to database rights.
• Support for a custom database down page to be displayed on database connection errors.
• Changes to make sure we are more selective in what we make clickable, this introduces different rules for different uri types.
• Changes to wp-mail.php to escape the error messages when displaying them to avoid a possible XSS attack.
• Changes to ensure that the post password is only exposed by the xmlrpc method metaWeblog.getRecentPosts to users with rights to edit a post.
• Changes to the information exposed the wp.getAuthors xmlrpc method to reduce the information exposed and add a capabilites check.
• Addition of extra capabilites checks to xmlrpc methods.
• Addition of extra capabilites checks to APP server.
• Changes to validate_file() to improve its traversal attempt detection when running on windows.

Get yours today.