An update to the popular blogging platform WordPress has just been released that fixes a critical security vulnerability in the software. WordPress 3.0.4 is already available for download at the official website and through the updating options on installed WordPress blogs.
The update is currently not announced on the frontpage of the admin interface which means that WordPress admins need to click on Updates to see the update options.
It is as usually possible to install the update right away by downloading it directly to the server running the blog. The script handles the download, unpacking and installation of the new version automatically.
Users who want to test the release first can also download it instead to do just that.
The vulnerability reads:
Fix XSS vulnerabilities in the KSES library: Don’t be case sensitive to attribute names. Handle padded entities when checking for bad protocols. Normalize entities before checking for bad protocols in esc_url()
WordPress rates the vulnerability as critical which means that webmasters should update their blogs as soon as possible to protect it from possible exploits of the issue.
WordPress is also available directly at the official website.
Enjoyed the article?: Then sign-up for our free newsletter or RSS feed to kick off your day with the latest technology news and tips, or share the article with your friends and contacts on Facebook or Twitter.Related Articles:
WordPress 3.1.1 Released, Fixes Security IssuesFirefox 3.6.12 Fixes Critical Security Vulnerability
Adobe Reader 9.3.3 Released, Fixes Critical Security Issues
WordPress 3.03 Security Update Released
Adobe Fixes Critical Shockwave Vulnerability
I am using 3.0.1. I will update it with hope that it will not do anything wrong with my website.
Would you please explain it in simple words?
“Fix XSS vulnerabilities in the KSES library: Don’t be case sensitive to attribute names. Handle padded entities when checking for bad protocols. Normalize entities before checking for bad protocols in esc_url()”
Thanks in advance.
Wow, this is what I’m looking for. Thanks for sharing and nice info.
Very nice post. It gives information I need. Thanks for sharing.
The first thing I did when I was checking my wp dashboard was upgrade.