A headless WordPress front end

The Gazette.

Reading the WordPress.org News blog over the REST API — no theme, no PHP.

Category

Security

88 posts · page 7 of 8

ReleasesDecember 8, 2010

WordPress 3.0.3

WordPress 3.0.3 is available and is a security update for all previous WordPress versions. This release fixes issues in the remote publishing interface, which under certain…

By Peter Westwood · 1 min read

ReleasesNovember 30, 2010

WordPress 3.0.2

WordPress 3.0.2 is available and is a mandatory security update for all previous WordPress versions. Haiku has become traditional: Fixed on day zero One-click update makes you…

By Mark Jaquith · 1 min read

ReleasesNovember 12, 2009

WordPress 2.8.6 Security Release

2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6…

By Ryan Boren · 1 min read

ReleasesOctober 20, 2009

WordPress 2.8.5: Hardening Release

As you know over the past couple of months we have been working on the new features for WordPress 2.9. We have also been working on trying to make WordPress as secure as possible…

By Peter Westwood · 1 min read

DevelopmentSeptember 5, 2009

How to Keep WordPress Secure

A stitch in time saves nine. I couldn’t sew my way out of a bag, but it’s true advice for bloggers as well — a little bit of work on an upgrade now saves a lot of work fixing…

By Matt Mullenweg · 4 min read

ReleasesAugust 12, 2009

WordPress 2.8.4: Security Release

Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password…

By Matt Mullenweg · 1 min read

ReleasesAugust 3, 2009

WordPress 2.8.3 Security Release

Unfortunately, I missed some places when fixing the privilege escalation issues for 2.8.1. Luckily, the entire WordPress community has our backs. Several folks in the community…

By Ryan Boren · 1 min read

ReleasesSeptember 8, 2008

WordPress 2.6.2

Stefan Esser recently warned developers of the dangers of SQL Column Truncation and the weakness of mt_rand(). With his help we worked around these problems and are now releasing…

By Ryan Boren · 1 min read

ReleasesApril 3, 2007

WordPress 2.1.3 and 2.0.10

We have a security update release now available for both the 2.1 and 2.0 branches of WordPress now available for immediate download. This update is highly recommend for all users…

By Matt Mullenweg · 1 min read

ReleasesJanuary 15, 2007

WordPress 2.0.7

Recently a bug in certain versions of PHP came to our attention that could cause a security vulnerability in your blog. We’re able to work around it fairly easily, so we’ve…

By Mark Jaquith · 1 min read

ReleasesJanuary 5, 2007

WordPress 2.0.6

We have a pretty important release available for everyone, it includes an important security fix and it’s recommended that everyone upgrade. This is the latest release in our…

By Matt Mullenweg · 1 min read