WordPress 2.8.6 released
WordPress 2.8.6 has been released to fix two security problems.
The first security problem is an XSS (Cross Site Scripting) vulnerability. The second an issue with uploaded file names. Both problems can only be exploited by registered, logged in users who have posting privileges.
See http://wordpress.org/development/2009/11/wordpress-2-8-6-security-release/ for more information.




















