WordPress 2.8.2 Released – Say What? A Security Release
Oh look. A birthday gift from the WordPress folks to me.
WordPress 2.8.2 was released on July 20th and is a security fix
I didn’t notice this until tonight because I’ve been out of the loop, ignoring the news, and freaking out. I tried to take a day off, tried to celebrate another journey around the sun, and tried to deal with an extremely sick kid with a Foreigner (the band) style fever.
So, apparently there is a XSS vulnerability. I know, I know – the XSS stuff really gets to me too ;-)
But this is a bad bugaboo. The URL left by a commentator can be exploited to redirect you away from the WordPress admin to some nefarious, evil other site.
I shouldn’t joke – this is serious. If you are already running 2.8 or 2.8.1, upgrade as soon as possible. (Make backups first). If you are still running the WordPress 2.7 series, you may want to sit tight for a couple of days to see it 2.8.3 makes an appearance.
Enjoy! Oh – and remember my guide to upgrading WordPress manually is still a valuable resource. A self-processed upgrade “newbie” said he used it successfully for his first ever manual upgrade.
photo credit: AndyWilson
Related posts:
Did you enjoy this article? I can assist you with your WordPress or Facebook project. Contact me and I will provide you with an estimate. You can also connect with me on Facebook or follow me on Twitter.
July 22, 2009 at 7:02 am
Oh look. A birthday gift from the WordPress folks to me.
I burst out laughing when I read that. I sooo can relate.
Thanks for the headsup!
.-= Barbara Ling, Virtual Coach´s last blog ..#1 way to make money online with CommentLuv longterm – Part 2 =-.
July 22, 2009 at 4:11 pm
Hi Barbara – It’s just what I always wanted ;-)
July 22, 2009 at 8:06 am
OMG, just few days back I have updated to WP2.8.1 and now its 2.8.2 ….
pretty fast than industry standards. But good for users.
.-= Aery´s last blog ..Prefix Tricks Or Query Options In Google Search That You Probably Didn’t Knew =-.
July 22, 2009 at 4:12 pm
Hi Aery – It’s definitely a trade-off between updates and security – this one was only a week later.
July 22, 2009 at 8:28 am
Thanks for the heads up. I really wanted to say Happy Birthday and hope your little girl is better soon. I had a bad bug myself, so I sympathize with her very much.Whatever is going around is awful!
.-= Tracy´s last blog ..I had the perfect title come to me while I was in bed last night =-.
July 22, 2009 at 4:12 pm
Hi Tracy – Thank you. Alex is feeling much better.
I hope you are feeling better too. :-)
July 22, 2009 at 11:41 am
Ah phoey! I thought I could wait this one out since I am scared to death of upgrading manually the instructions looks like Greek to me (auto upgrade isnt working). Thanks for the heads up.
.-= carla | green and chic´s last blog ..Online Store Review: Artprints-Online.com =-.
July 22, 2009 at 4:13 pm
Hi Carla – Well, if we just hold off maybe we’ll have 2.8.3 next week.
July 22, 2009 at 6:21 pm
I may wait until then. :)
.-= carla | green and chic´s last blog ..Online Store Review: Artprints-Online.com =-.
July 22, 2009 at 3:19 pm
This is beyond annoying.
Hope your daughter is feeling better.
.-= Vered – MomGrind´s last blog ..Happily Ever After =-.
July 22, 2009 at 4:13 pm
Hi Vered – Yeah – I’m even annoyed this time.
She is feeling better – it just came out of nowhere.