An important security issue was brought to our attention which required an update for our users. You should update your blog as soon as possible to WordPress 1.5.1.3. If you are unable to do the upgrade in the short-term you may protect yourself by deleting the xmlrpc.php file from your WordPress directory.
Related posts:
- WordPress 2.8.1 Coming Soon
"Right on the heels of version 2.8, we will be seeing a WordPress 2.8.1 release soon. There are several minor bugfixes in so far, mostly..." - WordPress 1.5.x safe from XML-RPC worm
" In case you didn’t already see my post over on the WordPress Development Blog, rest assured that WordPress is safe from the recently announced..." - WordPress Security Update
" We were recently notified of a SQL injection bug in the WordPress code. Matt patched the code and updated the archive on the downloads..." - XCache Object Cache Plugin for WordPress 2.5+
"[drain file 16 show default_show] This is another one of those articles that will be of interest to a minority of WordPress users. In particular,..." - Upgrade or else!
"UPDATE 2008-04-16: Well crud. I was just re-reading the WP 2.5 announcement post for something else, and spotted a bit about security updates between 2.3.3..."
3 Comments
Updated!
It was just very simple to do the upgrade, the instructions made it pretty easy!
I see that WP has also changed the admin interface, courtesy of orderedlist.com. Looking good
I am looking for informations for a beginner like me
I would like to create links like “www.blog.com/category” and not like this “www.blog.com/?cat=1″
4 Trackbacks
Gigabyte iRam – Boot Up Windows XP in Seconds Tech Gadgets Blog – LiewCF.com » Gadgets Google Sitemap Generator for WordPress v2 Final Home of Arne Brachhold » Other Stuff, Tools, Wordpress, Googlemap WordPress 1.5.1.3 geek ramblings » Security, Blogs, WordPress, Web Bamboo: As The Music Plays rebelpixel productions » Music Clean Look Theme for WordPress 1.5 Firman Pribadi » Ocehan, Mainan This could have been you Scarlett Johansson
[...] Los desarrolladores de WordPress acaban de lanzar una nueva actualización (la cuarta en tan sólo unos meses) que corrige un importante agujero de seguridad que, según afirma el propio Dougal Campbell, acaban de descubrir. En concreto, el problema tiene que ver con una vulnerabilidad en el archivo xmlrpc.php. [...]
Wordpress 1.5.1.3
There is apparently a significant security risk in the last version of WordPress (1.5.1.2) which required an immediate fix or upgrade. There is more information here about the steps required. The security hole hasn’t been released to the public yet….
[...] 官方似乎没说清楚，在geek ramblings看到了一点说明： [...]