- http://secunia.com/advisories/29938/
Release Date: 2008-04-25
Critical: Moderately critical
Impact: Exposure of sensitive information, Manipulation of data
Where: From remote
Solution Status: Vendor Patch
Software: WordPress Spreadsheep Plugin (wpSS) 0.x
…can be exploited to manipulate SQL queries by injecting arbitrary SQL code. The vulnerability is reported in version 0.6. Other versions may also be affected.
The vulnerability is reported in version 0.6. Other versions may also be affected.
Solution: Update to version 0.62. http://timrohrer.com/blog/?page_id=71
- http://secunia.com/advisories/29965/
Release Date: 2008-04-28
Critical: Highly critical
Impact: Security Bypass, Cross Site Scripting, System access
Where: From remote
Solution Status: Vendor Patch
Software: WordPress 2.x
…The vulnerability is reported in version 2.5. Prior versions may also be affected.
Solution: Update to version 2.5.1.
Original Advisory: WordPress: http://wordpress.org/development/2008/04/wordpress-251/ …"
WordPress v2.6.2 released
- http://wordpress.org/download/
09.08.2008 - "The latest stable release of WordPress (Version 2.6.2) is available…"
- http://wordpress.org/development/2008/09/wordpress-262/
September 8, 2008 - "Stefan Esser recently warned developers of the dangers of SQL Column Truncation and the weakness of mt_rand(). With his help we worked around these problems and are now releasing WordPress 2.6.2. If you allow open registration on your blog, you should definitely upgrade. With open registration enabled, it is possible in WordPress versions 2.6.1 and earlier to craft a username such that it will allow resetting another user’s password to a randomly generated password. The randomly generated password is not disclosed to the attacker, so this problem by itself is annoying but not a security exploit. However, this attack coupled with a weakness in the random number seeding in mt_rand() could be used to predict the randomly generated password. Stefan Esser will release details of the complete attack shortly. The attack is difficult to accomplish, but its mere possibility means we recommend upgrading to 2.6.2. Other PHP apps are susceptible to this class of attack. To protect all of your apps, grab the latest version of Suhosin**. If you’ve already updated Suhosin, your existing WordPress install is already protected from the full exploit. You should still upgrade to 2.6.2 if you allow open user registration so as to prevent the possibility of passwords being randomized. 2.6.2 also contains a handful of bug fixes*…"
* http://preview.tinyurl.com/55petj
WordPress v2.6.3 released
- http://wordpress.org/download/
October 23, 2008 - "…latest stable release of WordPress (Version 2.6.3) is available…"
- http://wordpress.org/development/2008/10/wordpress-263/
"A vulnerability in the Snoopy library was announced today. WordPress uses Snoopy to fetch the feeds shown in the Dashboard. Although this seems to be a low risk vulnerability for WordPress users, we wanted to get an update out immediately. 2.6.3 is available for download right now. If you don’t want to download the whole release to get the security fix, you can download… two files and copy them over your 2.6.2 installation…"
Fake WordPress site - trojanized
- http://www.theregister.co.uk/2008/11/06/tr…ised_wordpress/
6 November 2008 - "Fraudsters have set up a fake site featuring a backdoored version of the WordPress blogging application as part of a sophisticated malware-based attack. The fake Wordpresz.org site offered up what purports to be version 2.6.4 of the open source blogging tool. In reality all but one of the files are identical to the latest pukka (2.6.3) version of WordPress. The crucial difference comes in the form of a Trojanised version of pluggable.php, according to Sophos virus researcher Paul Baccas. Sophos detects the malicious code as WPHack-A Trojan. "The new PHP contains call backs to the Fake WordPress site and looks to be stealing credentials," Baccas reports… The latest version of WordPress (version 2.6.3), published on 23 October, is available through http://wordpress.org "
- http://wordpress.org/development/2008/11/wordpress-265/
November 25, 2008 - "WordPress 2.6.5 is immediately available and fixes one security problem and three bugs. We recommend everyone upgrade to this release. The security issue is an XSS exploit…"
WordPress v2.8.1 released
- http://wordpress.org/development/2009/07/wordpress-2-8-1/
July 9, 2009 - "WordPress 2.8.1 fixes many bugs and tightens security for plugin administration pages. Core Security Technologies* notified us that admin pages added by certain plugins could be viewed by unprivileged users, resulting in information being leaked. Not all plugins are vulnerable to this problem, but we advise upgrading to 2.8.1 to be safe…"
WordPress v2.8.2 released
* http://wordpress.org/download/
July 20, 2009 - "The latest stable release of WordPress (Version 2.8.2) is available…"
- http://wordpress.org/development/2009/07/wordpress-2-8-2/
July 20, 2009 - "WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site. Download 2.8.2* or automatically upgrade from the Tools->Upgrade page of your blog’s admin."
- http://secunia.com/advisories/35946/2/
Release Date: 2009-07-22
Critical: Moderately critical
Impact: Cross Site Scripting
Where: From remote
Solution Status: Vendor Patch
Software: WordPress 2.x …
Solution: Update to version 2.8.2 …
