RSS 2.0 (Posts)
Currently I’ve disabled registration for new users after being notified of a critical security problem. I don’t know what the flaw is (unlike Microsoft, Wordpress is choosing not to reveal how their flaws can be exploited before a fix is created), but since I don’t get many guest registrations I figured it couldn’t hurt. I’ll let you know when that feature is turned back on.
July 26, 2006
Site Notice
Filed under: General
Last Updated - July 26, 2006 at 4:09 pm :: Log in to edit :: Posted by mounty
Comment posted by filosofo (member) on July 27th, 2006 at 9:03 pm.
Link here
WordPress 2.0.4 with a security fix should be coming out in the next couple of days.
And although usually these kinds of security warnings are just scare-mongering, this exploit is so easy to do that you almost don’t have to know anything about web scripting to take advantage of it.
So I’d upgrade as soon as you can.
Pingback sent by The Code Cave (guest) on July 28th, 2006 at 12:32 am.
Link here
[…] Thanks to some drastic and controversial actions taken by SpamKarma creator Dr. Dave, a large percentage of the blogging populace has been alerted to a security hole in WordPress. He even went to the effort of activating a warning message that was sent out to everyone who uses his SK2 plugin. This has resulted in a lot of fear spreading amoung a huge number of bloggers. This sort of thing just spreads exponentialy. Here’s a quasi random sampling of two dozen of the first posts on it: ………………….. And these were just from the English blogs that post about this on the same day as the notice going out. The neat thing is that these are some of the most on-top-of-things bloggers out there. Those 24 blogs have some great content and gread visual styles. The are well worth perusing… […]