WordPress 2.8.4: Security Release
Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset.
Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset.
Wordpress is a great blogging platform and its ease of use means its use has become very widely used by both blogging pros and amateurs alike. If you are using Wordpress.com as your blogging platform this post does not apply to you, but if you have your own self-hosted installation of Wordpress you may want to read onward in order to see how your blog may be showing its backside like a patient in a cheap hospital gown.
One of the greatest things about blogging is the immediate feedback a blogger can get from his or her readers. Still it’s often possible that your readers don’t give you a wink about their likes and dislikes. Unfortunately, there is no way for you to find out about visitors thinking towards your blog or its design.
Anyone running a selfhosted (non-Wordpress.com) Wordpress blog using version 2.5 or newer is welcome to test a new plugin a developer friend and I have been working on (he’s done the vast majority of the work – thanks Mike!).
Search