WING LOON

WordPress 2.8.6

Nov 13

wingloonWordPress 1 Comment

This WordPress 2.8.6 release fixes two security problems that can be exploited by registered, logged in users who have posting privileges. Please upgrade to 2.8.6 if your blog have untrusted authors. Thanks to Benjamin Flesch for discovering the first problem which is a XSS vulnerability in Press This and thanks to Dawid Golunski for discovering an issue with sanitizing uploaded file names that can be exploited in certain Apache configurations.

I had upgraded my blog to 2.8.6 as of you are reading this post. So, upgrade yours to avoid any exploitation.

Source: WordPress