Lester Chan's WordPress Plugins
Lester Chan's WordPress Plugins Development Blog
WordPress 2.8.4 has been released and also similar to WordPress 2.8.3, this is a security fix. Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password…
WordPress 2.8.3 has been released and similar to WordPress 2.8.2, this is a security fix. Unfortunately, I missed some places when fixing the privilege escalation issues for 2.8.1. Luckily, the entire WordPress community has our backs. Several folks in the community dug deeper and discovered…
WordPress 2.8.2 has just been release. WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site. Changelog: WordPress 2.8.2 Download: WordPress 2.8.2 Download:…
WordPress 2.8.1 has been released. WordPress 2.8.1 fixes many bugs and tightens security for plugin administration pages. Core Security Technologies notified us that admin pages added by certain plugins could be viewed by unprivileged users, resulting in information being leaked. Not all plugins are vulnerable…
Here is my June 2009 WordPress plugins update containing all my 16 WordPress plugins update. All of them should work on WordPress 2.8 as I did not test them on any WordPress version below that. Now my plugins uses jQuery for AJAX instead of TW-Sack.…