Within few months of it’s previous major release Wordpress has today released yet another major version “Wordpress 2.9 Carmen” named after magical jazz vocalist Carmen McRae. According to official statement over 500 tickets, bugs, and enhancements have been addressed in wordpress 2.9.
WordPress has warned Administrators of selfhosted wordpress blogs who have not upgraded to latest wordpress 2.8.4 against smart worm. The worm spreads by exploiting and old security vulnerablity.The company is warning that the worm is spreading and it has only been identified bewcasue of flaws in the malware’s design.
“This particular worm, registers a user, uses a security bug (fixed earlier in the year) to allow evaluated code to be executed through the permalink structure, makes itself an admin, then use JavaScript to hide itself when you look at users page, attempts to clean up after itself, then goes quiet so you never notice while it inserts hidden spam and malware into your old posts,”
The worm’s poor design means that it breaks links on user’s page, alerting them to the fact that something is wrong.
Also Read Wordpress 2.8.4 Security Update Released
Wordpress team today released Wordpress 2.8.4 which is surly a security release to fix the problem of password reset where admin password could be reset without proper verification. Sensing the scale of risk a quick update has been released. The under said was quoted on official Wordpress website.
