Wordpress – Urgent upgrade

Published September 9, 2008 by Me

The guys over at Wordpress have rolled out an urgent upgrade up to version 2.6.2 to protect against a recent vulnerability which, although difficult to execute, does pose a threat.

Stefan Esser recently warned developers of the dangers of SQL Column Truncation and the weakness of mt_rand().  With his help we worked around these problems and are now releasing WordPress 2.6.2.  If you allow open registration on your blog, you should definitely upgrade.

Full details are in this post on their blog.

Filed under Wordpress, php, scripts

Comments (0)

Comments RSS - Trackback - Write Comment

No comments yet

Write Comment

By submitting a comment here you grant this site a perpetual license to reproduce your words and name/web site in attribution. Note that, due to spam, all comments are held for moderation so, if you're a spammer, either Askimet will plunge your cr@p to the depths of hell, or I will.