WordPress 2.1.3 has been released and I have updated this site to WordPress 2.1.3.
These releases include fixes for several publicly known minor XSS issues, one major XML-RPC issue, and a proactive full sweep of the WordPress codebase to protect against future problems.
WordPress has finally launched its official WordPress Plugins Directory after years of being empty.
Check out GaMerZ’s WordPress Plugins in the official WordPress Plugins Directory.
If you guys find any typo in the plugin description page, please do let me know. Thanks a lot.
I have created a thread in the support forums on how to translate WordPress Plugins to your own language using poEdit. This short tutorial comes with screenshots too.
Translating WordPress Plugins
Hope you guys find it useful.
WordPress 2.1.2 has been released and I have updated this site to WordPress 2.1.2.
It is an emergency release, so I urged all of you to upgrade it.
Here is what happen, copied + pasted:
This morning we received a note to our security mailing address about unusual and highly exploitable code in WordPress. The issue was investigated, and it appeared that the 2.1.1 download had been modified from its original code. We took the website down immediately to investigate what happened.
It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. We have locked down that server for further forensics, but at this time it appears that the 2.1.1 download was the only thing touched by the attack. They modified two files in WP to include code that would allow for remote PHP execution.
Remember to overwrite EVERY files/folders except those in the ‘wp-content’ folder.
WordPress 2.1.1 has been released and I have updated this site to WordPress 2.1.1.