by John Ankarström on August 12, 2009
in Releases
A vulnerability in WordPress 2.8.3 was discoved yesterday. The WordPress Blog says:
A specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.
The WordPress is now updated to version 2.8.4, and is available for download. Remember, you can easily update WordPress automatically :-)
by John Ankarström on July 20, 2009
in Releases
It has not been long since WordPress 2.8 arrived, and only two weeks ago 2.8.1 was released. The people at WordPress are fast!
Now, WordPress 2.8.2 has arrived, fixing a critical bug, an XSS vulnerability. As Ryan Boren at WordPress Blog describes it:
Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site.
As I said, version 2.8.2 fixes this bug. So, upgrade your blog (can be done automatically since 2.7) , and don’t forget to backup your database!
The new WordPress Plugin Expose It by Adrian Apan is a cool plugin that simply adds expose effect around any div with class="expose", with a little help from the Expose jQuery.
Here’s a example. Of course you can put images, video etc. inside the div too.
This is it, the exposed text. Now, click!
It’s very easy to setup. Just download the plugin, install and activate it. Then you’re free to expose! Do as I did:
<div class="expose">"This is the text, with expose effect. Just click it.</div>
