Alex Gone WP

Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.

We fixed this problem last night and have been testing the fixes and looking for other problems since then. Version 2.8.4 which fixes all known problems is now available for download and is highly recommended for all users of WordPress.

From wordpress.org

Wordpress has been upgraded up to version 2.6.5. skipping 2.6.4. Apparently there were some security problems in previous WP version. 2.6.5. deals with the issue and fixes 3 bugs that been found in previous WP offerings.

Don’t forget to say thank you to Jeremias Reith who found there was a problem with an XXS exploit that affected IP-based virtual servers running on Apache 2.x and upgared your WPs to version 2.6.5

The Wordpress 2.7 due to arrive in the beginning of November is now rescheduled for release in late November. Still users may download the beta version of the application called Wordpress 2.7 Beta 1 and test it for bugs and critical errors.

The 2.7 version of our favorite blogging platform is about designing modifications only. The sidebar will be placed on the right side and the admin area will go through some cosmetic changes as well.

All in One SEO Pack is a plugin that allows you to customize your WP blog in a SEO-friendly manner. One of the options the plugin provides is an automatic optimization of the blog titles displayed in the browser line - both for home page and posts page. It means you will have a brief description of a blog that may go before or after the blog name and there will also be a post title in the browser line for posts pages. This is the way to show users what your blog is dedicated to and that’s definitely more important than just showing the title of the blog. (more…)

Ever dreamt of upgrading your WP without any particular difficulties? Well, it’s possible. I personally haven’t heard of special plugin allowing to follow the WP new versions’ release. No HTML or grueling installation process. The plugin works something similar to a wizard that will guide you through all the steps and will automatically do everything necessary and also update you on the new version availability.

So since today I’m a lucky user of WP version 2.6.3.

Wordpress users now may reply on other users’ comments straight from their mail box. As soon as you get the email notifying you have a new comment, you may post a reply and it’ll appear on the website right away. Users won’t have to log-in to the site each time to make others happy with your reply  - Wordpress will make it happen via email. The whole thing is still being tested. Well, you may read one of the articles on the subject

I thought I’d drop you guys a small “big” news on WP statistics. I was able to locate some impressive numbers on WP for September: how many new users joined, how many new comments made etc.

Check the http://en.blog.wordpress.com/2008/10/02/september-wrap-up-2/ to learn more quite impressive stats.

Wordpress platform is about to have another upgrade in November to version 2.7. The update mainly concerns the dashboard which now will be placed on the left and will contain subcategories as well; navigation sections and labels.
(more…)