WordPress 2.6.5 Released

This new version fixes one security issue and 3 bugs.

The security issue is an XSS exploit discovered by Jeremias Reith that fortunately only affects IP-based virtual servers running on Apache 2.x. If you are interested only in the security fix, copy wp-includes/feed.php and wp-includes/version.php from the 2.6.5 release package.

2.6.5 contains three other small fixes in addition to the XSS fix. The first prevents accidentally saving post meta information to a revision. The second prevents XML-RPC from fetching incorrect post types. The third adds some user ID sanitization during bulk delete requests.

WordPress 2.6.3 Released

Just recently, WordPress released v ersion 2.6.3, which they say is a minor security release but is still worth downloading and upgrading. I was reading New WordPress Hacking Strategy Using Cloaking to Target Google IP Addresses and decided to check my WP installation. Thankfully, I got to find out there’s a new version released.