Lester Chan's WordPress Plugins
Lester Chan's WordPress Plugins Development Blog
WordPress 2.8.6 has been released. This is a security release. 2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended. The first problem is…
WordPress 2.8.5 has been released. This release makes your WordPress even more secure: A fix for the Trackback Denial-of-Service attack that is currently being seen. Removal of areas within the code where php code in variables was evaluated. Switched the file upload functionality to be…
WordPress 2.8.4 has been released and also similar to WordPress 2.8.3, this is a security fix. Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password…
WordPress 2.8.3 has been released and similar to WordPress 2.8.2, this is a security fix. Unfortunately, I missed some places when fixing the privilege escalation issues for 2.8.1. Luckily, the entire WordPress community has our backs. Several folks in the community dug deeper and discovered…
WordPress 2.8.2 has just been release. WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site. Changelog: WordPress 2.8.2 Download: WordPress 2.8.2 Download:…