WordPress 2.8.4 Released to Fix Admin Password Reset Exploit

Posted by : Dexter Panganiban on August 11, 2009 | ; Filed Under Wordpress

If you don’t want hackers to reset your passwords better do the upgrade immediately :

Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.

We fixed this problem last night and have been testing the fixes and looking for other problems since then. Version 2.8.4 which fixes all known problems is now available for download and is highly recommended for all users of WordPress.

OOppsss I need to update lots of blog .. Need ty find time for my very busy schedule now adays

WordPres 2.8.2 Security Fix is Available
Just a quick post . Just days after WordPress 2.8.1 has been released , WordPress decided to release WordPress 2.8.2 and This is what is shown in their blog : WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploite...
WordPress 2.8.5 Just Released
I would suggest upgrading to the latest WordPress Version that was released which is WordPress 2.8.5 . It's a security update so don't think twice. Here is the headlines for the updates: The headline changes in this release are: * A fix for the Trackback Denial-of-Service attack that is cur...
WordPress 2.8.1 Beta Released
After the release and problems that I faced from WordPress 2.8, WordPress has released its 2.8.1 Beta version and the following fix to comments as posted by many bloggers that immediately upgraded to WordPress 2.8. Here are some of the issues that are fixed in beta 1. Certain themes were ca...

Incoming search terms:

wordpress 2 5 1 exploit

Tags: Wordpress 2.8.4

About the author

Dexter is a person that love technology,new gadget, SEO, Social Media and Christianity. Follow him at twitter via @techathand and add him @ Google+ and contact us at admin@techathand.net

Interesting Comments

10 Responses to “WordPress 2.8.4 Released to Fix Admin Password Reset Exploit”

metalpig on August 12th, 2009 12:10 am

That’s fast! just updated from WP 2.8.3 and now there’s 2.8.4…
Awesome!

Reply
Dexter Panganiban Reply:
August 12th, 2009 at 10:17 pm

@metalpig,

Nakuw.. late ko na nabasa itong comment mo ha ha ha..

Reply
metalpigs Reply:
August 13th, 2009 at 5:14 pm
@sir Dex,
oks lang sir nakapag-update na rin ako
medyo busy ka yata ngayon ah, si esmi ang nagpo-post… heheheh

Reply
Dexter Panganiban Reply:
August 14th, 2009 at 11:16 pm

@metalpigs,

OO nga may tinatapos akong project. Buti na lang marunong ng magblog misis.. Susunod nyan mga anak ko na makikita mo nag blog dito he he e
Blogfornoob Dot Com on August 12th, 2009 2:27 am

thnks for sharing… better to upgrade agaiin.. heheh

Reply
Dexter Panganiban Reply:
August 12th, 2009 at 10:17 pm

@Blogfornoob Dot Com,
Better do a minute of update than to have 2 days of down site due to hack

Reply
ark on August 12th, 2009 5:58 pm

Ok to. Time to upgrade!

Reply
Dexter Panganiban Reply:
August 12th, 2009 at 10:18 pm

@ark,

Go go go !!!!

Reply
scott on August 16th, 2009 6:23 pm

since updating to 2.8.4, i cannot use wordpress for iphone app. why is this?

Reply
Dexter Panganiban Reply:
August 17th, 2009 at 12:10 am

@scott,

Maybe the developer of that application should update it and make it compatible with WordPress 2.8.4

Reply