WordPress 2.8.5- Hardening Release

Posted on October 21, 2009, 1:19 pm, by Dhaval Thakar.

Identified a number of security hardening changes.

The headline changes in this release are:

* A fix for the Trackback Denial-of-Service attack that is currently being seen.
* Removal of areas within the code where php code in variables was evaluated.
* Switched the file upload functionality to be whitelisted for all users including Admins.
* Retiring of the two importers of Tag data from old plugins.

WordPress had recommend that all sites are upgraded to this new version of WordPress to ensure that you have the best available protection.

Source

Share|