Wordpress 2.8.3.: New Security Release

Aug 05, 2009

The 2.8.3 release of the free blog software Wordpress fixes some privilege escalation problems left over from a previous version.

It seems a hijacked URL was enough to allow registered users access to option pages like those for plugins and themes. These issues have now been fixed, say Wordpress developers.

The privilege escalation problem was supposed to have been fixed in version 2.8.1 but obviously some areas were overlooked, regrets developer Ryan Boren. The version 2.8.3 download can be found at Wordpress.org.

Related content

comments powered by Disqus