Aug 12

A vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.

We fixed this problem last night and have been testing the fixes and looking for other problems since then. Version 2.8.4 which fixes all known problems is now available for download and is highly recommended for all users of WordPress.

Related Posts

6 Responses to “Please immediately upgrade your wordpress to 2.8.4”

  1. Best you should change the blog subject Please immediately upgrade your wordpress to 2.8.4 | GO IT WORLD | IT TECH | IT NEWS to something more catching for your webpage you write. I enjoyed the blog post withal.

  2. All that I read on your blog is very interesting and causes arguments and disputes. For this I love to read you

  3. Thank you!
    —————————————

  4. tramodol says:

    Today you are in good shape, thanks for the post

  5. emma says:

    welcom

  6. twiter says:

    I hope you do not mind if I posted a link on digg

Leave a Reply

preload preload preload