Boost Your Revenue with Bidvertiser Conversion Bonus

by Tran Tinh · 15 Comments

WordPress 2.8.6 Security Release

by Tran Tinh on November 13, 2009 · 10 comments

Image credit: http://wordprezzie.com

If you are using WordPress, you must be aware of this security release that has just been introduced this morning from WordPress Developers Team. This release includes two security fixes as followed:

2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended.

The first problem is an XSS vulnerability in Press This discovered by Benjamin Flesch. The second problem, discovered by Dawid Golunski, is an issue with sanitizing uploaded file names that can be exploited in certain Apache configurations. Thanks to Benjamin and Dawid for finding and reporting these.

I have just upgraded my WordPress to this version as my blog is multi-authors and this is very important as this time, the security fix targets multi-author blogs. I am a lucky man :)

This article was written by Tinh Tran

Tinh has contributed 168 articles to eBlogTip dot Com. I am a disabled blogger who loves blogging and making money online. I have more than 5 years working with Google Adsense and many other revenue sharing networks. This blog is born to help those who are interested in blogging and MMO.

Stay in touch with blog updates by subscribing to RSS or Email to get updates delivered to your mailbox.

{ 1 trackback }

WordPress 2.8.6 Security Release: November 13, 2009 at 12:21 pm

{ 9 comments… read them below or add one }

1 Sahil Kotak November 13, 2009 at 2:15 pm

Updated it before few hours, my blog also have Multi-Authors so i am safe now :baby_soldier: :baby_soldier: :baby_soldier:
Sahil Kotak´s last blog ..12 Plugins For Increasing Comments On Your Blog

Reply

2 Tran Tinh November 14, 2009 at 2:13 pm: Yes, you have done right thing

Reply

3 George Serradinho November 14, 2009 at 7:25 am

I upgraded automatically with no issues at all. My blog has a few guest posters so I had to upgrade ASAP.

I actually thought that they would wait a bit longer and bring out version 2.9, but I think the security release is a must as there are many sites who have guest bloggers :)
George Serradinho´s last blog ..WordPress 2.8.6 Release – 2 Security Fixes

Reply

4 Tran Tinh November 14, 2009 at 2:14 pm: I never use Beta but always upgrade to the latest version as the latest version must be an improved one with many security fixes

Reply

5 George Serradinho November 14, 2009 at 7:27 am

I see your smilies are very big, might want to take care of the placement as it makes the line look much better. I also want to say that the smilies are way better than the defualt ones WP supplies ;)
George Serradinho´s last blog ..WordPress 2.8.6 Release – 2 Security Fixes

Reply

6 Tran Tinh November 14, 2009 at 2:15 pm: Well, I hate the default smilies and I want to make my comments more emotional, not just typing as usual

Reply

7 forex_strategy November 23, 2009 at 12:54 am