Wordpress 2.8.4 Released to Fix Admin Password Reset Exploit

Posted by : Dexter Panganiban | ; Filed Under Wordpress

Welcome back! You might want to check my Archives and let me take this opportunity to invite you at my Make Money Online Personal Blog

If you don’t want hackers to reset your passwords better do the upgrade immediately :

Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.

We fixed this problem last night and have been testing the fixes and looking for other problems since then. Version 2.8.4 which fixes all known problems is now available for download and is highly recommended for all users of WordPress.

OOppsss I need to update lots of blog .. Need ty find time for my very busy schedule now adays

WordPres 2.8.2 Security Fix is Available
Just a quick post . Just days after WordPress 2.8.1 has been released , WordPress decided to release...
Wordpress 2.8.5 Just Released
I would suggest upgrading to the latest Wordpress Version that was released which is Wordpress 2.8.5...
Wordpress 2.8.1 Beta Released
After the release and problems that I faced from WordPress 2.8, WordPress has released its 2.8.1 Bet...
WordPress 2.5.1 is out
Do You Still Have Admin User ?

About the author

Dexter Panganiban : Dexter is a techie person that also blogs at his Personal Blog " Dexter Panganiban Site ", He is a Mechanical Engineer by Profession. He loves Search Engine Optimization and Making Money Online

Interesting Comments

10 Responses to “Wordpress 2.8.4 Released to Fix Admin Password Reset Exploit”

metalpig on August 12th, 2009 12:10 am

That’s fast! just updated from WP 2.8.3 and now there’s 2.8.4…
Awesome!

Reply
Dexter Panganiban Reply:
August 12th, 2009 at 10:17 pm
@metalpig,

Nakuw.. late ko na nabasa itong comment mo ha ha ha..

Reply
metalpigs Reply:
August 13th, 2009 at 5:14 pm
@sir Dex,
oks lang sir nakapag-update na rin ako
medyo busy ka yata ngayon ah, si esmi ang nagpo-post… heheheh

Reply
Dexter Panganiban Reply:
August 14th, 2009 at 11:16 pm
@metalpigs,

OO nga may tinatapos akong project. Buti na lang marunong ng magblog misis.. Susunod nyan mga anak ko na makikita mo nag blog dito he he e

Reply
Blogfornoob Dot Com on August 12th, 2009 2:27 am

thnks for sharing… better to upgrade agaiin.. heheh

Reply
Dexter Panganiban Reply:
August 12th, 2009 at 10:17 pm
@Blogfornoob Dot Com,
Better do a minute of update than to have 2 days of down site due to hack

Reply
ark on August 12th, 2009 5:58 pm

Ok to. Time to upgrade!

Reply
Dexter Panganiban Reply:
August 12th, 2009 at 10:18 pm
@ark,

Go go go !!!!

Reply
scott on August 16th, 2009 6:23 pm

since updating to 2.8.4, i cannot use wordpress for iphone app. why is this?

Reply
Dexter Panganiban Reply:
August 17th, 2009 at 12:10 am
@scott,

Maybe the developer of that application should update it and make it compatible with WordPress 2.8.4

Reply