Tag: "security"

WordPress sucks, WordPress sucks not. Which one is it?

Mark from 45n5.com has posted a short and pointed video about WordPress, and how it sucks. The video is aptly titled "WordPress sucks," and here it is for your viewing pleasure: [youtube]http://www.youtube.com/watch?v=X0BTz-hTvOg[/youtube] David Peralty has responded with his own video on BloggingPro arguing that ... View Post

It’s time to upgrade WordPress

I logged in to my blog today only to find a disturbing little message at the top of the screen: "A new version of WordPress is available! Please update now." Yes folks, despite the goal of not releasing any new versions until 2.3, we now are faced with WordPress version 2.3.2, which fixes ... View Post

WordPress vulnerability means don’t save sensitive information in drafts

Secunia has reported the following vulnerability in WordPress 2.3.1:

Michael Brooks has discovered a vulnerability in WordPress, which can be exploited by malicious people to bypass certain security restrictions and to disclose sensitive information. The application does not properly restrict access to posted drafts

... View Post

New WordPress vulnerability: “Style” Cross-Site Scripting

A new vulnerability has been reported on Secunia in WordPress 2.2.1, and possibly in other versions:

DESCRIPTION: Benjamin Flesch has discovered a vulnerability in WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to the "style" parameter in wp-admin/upload.php (when "post_id" is set to a negative integer

... View Post

A vulnerability in WordPress 2.1.2

It seems that another vulnerability has been discovered, this time in WordPress 2.1.2. According to Secunia, it can be "be exploited by malicious people to conduct cross-site scripting attacks." Doesn't sound very nice. This just justifies my Dad's approach to computer and software upgrades - if it ain't broke, ... View Post