A headless WordPress front end

The Gazette.

Reading the WordPress.org News blog over the REST API — no theme, no PHP.

Category

Security

93 posts · page 7 of 8

DevelopmentMay 25, 2011

WordPress 3.1.3 (and WordPress 3.2 Beta 2)

WordPress 3.1.3 is available now and is a security update for all previous versions. It contains the following security fixes and enhancements: Various security hardening by…

By Mark Jaquith · 2 min read

ReleasesApril 26, 2011

WordPress 3.1.2

WordPress 3.1.2 is now available and is a security release for all previous WordPress versions. This release addresses a vulnerability that allowed Contributor-level users to…

By Ryan Boren · 1 min read

ReleasesApril 5, 2011

WordPress 3.1.1

WordPress 3.1.1 is now available. This maintenance and security release fixes almost thirty issues in 3.1, including: Some security hardening to media uploads Performance…

By Ryan Boren · 1 min read

DevelopmentFebruary 7, 2011

WordPress 3.0.5 (and 3.1 Release Candidate 4)

WordPress 3.0.5 is now available and is a security hardening update for all previous WordPress versions. This security release is required if you have any untrusted user accounts,…

By Andrew Nacin · 2 min read

ReleasesDecember 29, 2010

3.0.4 Important Security Update

Version 3.0.4 of WordPress, available immediately through the update page in your dashboard or for download here, is a very important update to apply to your sites as soon as…

By Matt Mullenweg · 1 min read

ReleasesDecember 8, 2010

WordPress 3.0.3

WordPress 3.0.3 is available and is a security update for all previous WordPress versions. This release fixes issues in the remote publishing interface, which under certain…

By Peter Westwood · 1 min read

ReleasesNovember 30, 2010

WordPress 3.0.2

WordPress 3.0.2 is available and is a mandatory security update for all previous WordPress versions. Haiku has become traditional: Fixed on day zero One-click update makes you…

By Mark Jaquith · 1 min read

ReleasesNovember 12, 2009

WordPress 2.8.6 Security Release

2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6…

By Ryan Boren · 1 min read

ReleasesOctober 20, 2009

WordPress 2.8.5: Hardening Release

As you know over the past couple of months we have been working on the new features for WordPress 2.9. We have also been working on trying to make WordPress as secure as possible…

By Peter Westwood · 1 min read

DevelopmentSeptember 5, 2009

How to Keep WordPress Secure

A stitch in time saves nine. I couldn’t sew my way out of a bag, but it’s true advice for bloggers as well — a little bit of work on an upgrade now saves a lot of work fixing…

By Matt Mullenweg · 4 min read

ReleasesAugust 12, 2009

WordPress 2.8.4: Security Release

Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password…

By Matt Mullenweg · 1 min read

ReleasesAugust 3, 2009

WordPress 2.8.3 Security Release

Unfortunately, I missed some places when fixing the privilege escalation issues for 2.8.1. Luckily, the entire WordPress community has our backs. Several folks in the community…

By Ryan Boren · 1 min read