XSS Security Holes in WordPress Blogging Tool

This Netcraft security alert should be read by anyone who runs a WordPress blog. When you access the admin section of your blog you may be redirected elsewhere.

“We are disappointed that we were not given the opportunity to release fixes for the problems before the information was made public, as is the usual courtesy in the security community,” said a post on the WordPress forum. “However, that’s water under the bridge at this point. Expect a WordPress 1.2.1 release soon, which will address these issues.”

Author: Donncha

Donncha Ó Caoimh is a software developer at Automattic and WordPress plugin developer. He posts photos at In Photos and can also be found on Google+ and Twitter.

Leave a Reply