Wordpress 2.8.2 Released – Fixes XSS Vulnerability

Since the release of the WordPress Blog Platform Version 2.8 of June 11 2009, there was an update almost within a month to 2.8.1 and now it’s 2.8.2 to fix some more problems

WordPress 2.8.2 – WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site.

Download 2.8.2 or automatically upgrade from the Tools->Upgrade page of your blog’s admin.

WordPress 2.8.1 – Release Date – July 9, 2009

WordPress 2.8.1 fixes many bugs and tightens security for plugin administration pages. Core Security Technologies notified us that admin pages added by certain plugins could be viewed by unprivileged users, resulting in information being leaked. Not all plugins are vulnerable to this problem, but we advise upgrading to 2.8.1 to be safe.

Wordpres 2.8 – Release Date – June 11, 2009 Code Name – “Baker”, named in honor of noted trumpeter and vocalist Chet Baker.

WordPress 2.8 Complete Version Highlights