WordPress 2.8.6 --------- Exploit

[TheSenator]

http://www.net-security.org/secworld.php?id=8502


Just upgrade and shut your mouth.

[Agent 488]

WordPress 2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended.

[TheSenator]

Upgrading.......


Went smoothly....No for all my little blogs and clients.

[d-null]

WordPress 2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended.

probably going to wait for 2.8.7 then

[seeandsee]

jesus will they make exploit free?

[dav3]

thanks for posting this

2.8.6 just released, time to update.

[TidalWave]

upgrading wordpress is a pain in the ass for me as the auto upgrade feature keeps failing at copying a file... sigh !

[fris]

pussy lips

[Juicy D. Links]

pussy lips

[fris]

also, this exploit is only for users who have posting privleges, so if you have trusted users, you have nothing to worry about.

[JD]

jesus christ...

[JamesK]

also, this exploit is only for users who have posting privleges, so if you have trusted users, you have nothing to worry about.

exactly. 99.9% of the people here wont be affected at all.

[Cyber Fucker]

Every another version has more and more holes that's also one of the reasons why I prefer to make older versions more secured instead of updating over and over again.

[LoveSandra]

thanks for posting

[CYF]

thanks for the info

seems every 2 weeks a new wordpress exploit comes out.

[Ginn]

Yes, it probably won't take long to wait for a 2.8.7 version

[BigRod]

and if you have UNtrusted publishers the only question is WHY?