WordPress 2.8.4 released

Yesterday the WordPress team discovered a vulnerability in WordPress: it is apparently possible for an attacker to bypass a security check and reset the admin account’s password and cause the new password to be emailed to the account owner. This does not allow remote access, but could be rather annoying.

For more information refer to the WordPress announcement.

The WordPress team recommend prompt update to WordPress 2.8.4 which fixes all known problems.

Bookmark It

Hide Sites