WordPress 2.8.2 Available for Download
WordPress, the most popular blogging software is vulnerable. You don’t need to worry about it, WordPress has released a security patch — 2.8.2. If you are using 2.8 or 2.8.1 you should upgrade right away!
Quote from WordPress:
WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site. Download 2.8.2 or automatically upgrade from the Tools->Upgrade page of your blog’s admin.
Sensonize.com got hacked a few days back because of this vulnerability which is extremely dangerous. You can lose all your content and blog if a hacker runs this exploit on your blog.
The upgrade changes only 10 files and doesn’t touch the database. A simple upload and replace is all that’s required. Or you can use the auto upgrade feature built into the WordPress software.
Related Posts
6 Comments Add yours
July 27, 2009
12:33 pm #comment-1
Sensonize.com got hacked a few days back because of this vulnerability which is extremely dangerous.
July 28, 2009
5:02 am #comment-2
Yep. That’s why I thought of informing everyone to upgrade it asap 🙂
July 28, 2009
8:18 pm #comment-3
Thanks for the information, they fixed it quite fast, because I logged in on my blog and it was like “Upgrade 2.8.2” I was wondering what was wrong with wordpress to have an update so soon after they release the 2.8.1.. Now I do know.. lol Losing my content would be awful!
September 7, 2009
6:30 pm #comment-4
Yes but download WordPress 2.8.4! It is important, other versions have vulnerabilities!
September 17, 2009
6:40 am #comment-5
wow thx!
January 29, 2012
4:37 am #comment-6
Your article very much. I re-read a new post.