WordPress Security

Last week, some reports came out about security bugs in WordPress. The development team has been working to clean these up, and a WordPress 1.2.1 release was announced today. Obviously, these fixes have also gone into the 1.3-alpha version which is currently under development.

We appreciate the WordPress community’s patience while we fixed the problems. If you are running WP 1.2 or older, and can’t upgrade immediately for some reason, you can protect yourself very easily. Simply click the “Logout” button in the admin screens whenever you don’t need to be in the admin interface.

If you’re ready to upgrade, download WordPress 1.2.1 from the usual location.

Related posts:

1. Important: Upgrade to WordPress 2.1.2
   " In the interest of getting the word out as quickly and as widely as possible, a brief word about a new WordPress release: If..."
2. WordPress Security Update
   " We were recently notified of a SQL injection bug in the WordPress code. Matt patched the code and updated the archive on the downloads..."
3. WordPress 1.5.1.3
   " An important security issue was brought to our attention which required an update for our users. You should update your blog as soon as..."
4. WordPress 1.5.2 Security FUD
   " There is some misleading FUD going around about a vulnerability in WordPress 1.5.2. Let’s get this out of the way plainly: There is not..."
5. Snoopy PHP Webclient Security
   " There is a security advisory out regarding a Snoopy PHP Webclient vulnerability. Since WordPress uses Snoopy internally, we immediately double-checked to be sure that..."