WordPress 2.8.5 Released for Security Reasons
by Kevin on October 21, 2009
WordPress has released the fifth point update since version 2.8 was released. There are a significant number of security issues addressed within this update, making it important that you upgrade if you are at all concerned with your site being hacked into.
Some of the main changes within this release include:
- A fix for the Trackback Denial-of-Service attack that was seen.
- Removal of areas within the code where PHP code in variables was evaluated.
- Switched the file upload functionality to be white-listed for all users including Admins.
- Retiring of the two importers of tag data from old plugins.
A new version of the WordPress Exploit Scanner is available through the WordPress Codex.
Please update to the latest version to avoid possible exploits.
On a side, but connected note, WordPress 2.9′s first beta release will be available in the upcoming weeks, slated for a release sometime towards the end of the year.
Leave your comment