Wordpress 2.3.3

By Rappy
in Back Page News

 Share

Recommended Posts

Grand Master

Rappy Veteran

Posted
  • Veteran
Posted

As most will know if you log into your blog using Wordpress that theres an update but incase you don't...

WordPress 2.3.3 is an urgent security release. If you have registration enabled a flaw was found in the XML-RPC implementation such that a specially crafted request would allow a user to edit posts of other users on that blog. In addition to fixing this security flaw, 2.3.3 fixes a few minor bugs. If you are interested only in the security fix, download the fixed version of xmlrpc.php and copy it over your existing xmlrpc.php. Otherwise, you can get the entire release here.

Also, there is a vulnerability in the WP-Forum plugin that is being actively exploited right now. If you are using this plugin, please remove it until an update is available from its author.

Since we are talking security, remember to use strong passwords and change them regularly. While you?re updating WP and your plugins, consider refreshing your passwords.

[Download[/b]b>]

Link to comment
https://www.neowin.net/forum/topic/618089-wordpress-233/
Share on other sites
Grand Master

Rappy Veteran

Posted
  • Author
  • Veteran
Posted
Saw this, but thanks. One of the drawbacks of being one of the most disliked moderators here is that I have to update immediately or wind up screwed lol.

:|

Would people that low to do stuff like that?

I update all the time now never used to update with the small fixes.

Link to comment
https://www.neowin.net/forum/topic/618089-wordpress-233/#findComment-589188557
Share on other sites
Grand Master

Veedems Veteran

Posted
  • Veteran
Posted
:|

Would people that low to do stuff like that?

I update all the time now never used to update with the small fixes.

Lol, you'd be surprised. If it's not spamming the hell out of the site, it's trying various exploits. You should see the log of how many attempts were made recently to use some kind of URL exploit.

Back on topic, though, I'm very anxious to see what 2.5 brings to the table.

Link to comment
https://www.neowin.net/forum/topic/618089-wordpress-233/#findComment-589188562
Share on other sites
Grand Master

Echilon

Posted
Posted
Lol, you'd be surprised. If it's not spamming the hell out of the site, it's trying various exploits. You should see the log of how many attempts were made recently to use some kind of URL exploit.

Back on topic, though, I'm very anxious to see what 2.5 brings to the table.

I've got a plugin called 4040 notifier installed and it logs loads of failed attempts at exploits. My blog doesn't get massive amount of traffic, but at least 10% is people trying exploits.

Link to comment
https://www.neowin.net/forum/topic/618089-wordpress-233/#findComment-589190183
Share on other sites
Grand Master

Veedems Veteran

Posted
  • Veteran
Posted
I've got a plugin called 4040 notifier installed and it logs loads of failed attempts at exploits. My blog doesn't get massive amount of traffic, but at least 10% is people trying exploits.

I figured most of them are random attackers, but there's a reason I had to remove the shoutbox lol. People from here tend to get really ****y when I have to issue a warning.

Link to comment
https://www.neowin.net/forum/topic/618089-wordpress-233/#findComment-589190229
Share on other sites
Grand Master

lnmnky

Posted
Posted
Is that automatic upgrade process reliable... unless Wordpress got rights to it and licenced it under its own future releases, I won't be relying upgrading on a plugin. A hassle yes.

Well It just downloads the latest zip file, and extracts it over the directory.

I does the same thing as I would do over FTP. So I don't see how it can go wrong. (Or more wrong than me doing it) :p

Link to comment
https://www.neowin.net/forum/topic/618089-wordpress-233/#findComment-589190661
Share on other sites
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • First NVIDIA-powered Windows laptops reportedly debut next week

      By cyberhash · Posted

      I found that stability back then was really down to the motherboard manufacturer. Back then i stuck with Microstar motherboards and VIA chipsets as they were ultra reliable. Most stuff was done with jumpers and left little room for user created problems 👍
    • Microsoft outs new Windows 11 native command-line utility. Revolutionizes native app making.

      By Fleet Command · Posted

      So say we all.
    • Microsoft outs new Windows 11 native command-line utility. Revolutionizes native app making.

      By Fleet Command · Posted

      Yes, Scoop was created to promote Coreutils for Windows. You can still see early versions of their website on the Web Archive. It was a joke that nobody took seriously. Microsoft's implementation of Coreutils, however, are built in Rust.
    • Looks like EA's Star Wars Zero Company will be out this August

      By LoneWolfSL · Posted

      Looks like EA's Star Wars Zero Company will be out this August by Pulasthi Ariyasinghe Over a year ago, EA surprise announced that a team of former Firaxis members is working on a brand-new Star Wars game. Dubbed Zero Company, the title would have XCOM-like turn-based tactics gameplay as players manage a squad of professionals from all over the galaxy. Now, just ahead of an official announcement, it looks like the release date has leaked out. The upcoming Summer Game Fest presentation on Friday is when EA is supposed to show off the title's gameplay footage, with fans also expecting it to reveal a release date. However, the ever-reliable billbil-kun from Dealabs says they have already managed to find out when the game is coming out and what versions fans will have the option of purchasing. Per the leak, Star Wars Zero Company has an August 27, 2026, release date attached to it. The title is slated to release on PC, Xbox Series X|S, and PlayStation 5 with a $49.99 standard and $59.99 Deluxe edition. The leaker also adds that there won't be any early access perk attached to this special edition. Pre-orders could kick off alongside the official announcement this Friday, too. For those unfamiliar with the title, Bit Reactor is developing Star Wars Zero Company with help from Respawn Entertainment and Lucasfilm Games. The EA-published title is said to be set during the "twilight of the Clone Wars." We will have to wait and see if base building and management mechanics from the XCOM series will be present here, too. "You will step into the shoes of Hawks, a former Republic officer who leads Zero Company — an unconventional outfit of professionals for hire hailing from across the galaxy," reads the game description. "Hawks and Zero Company are recruited for an operation that pits them against an emerging threat that will consume the galaxy if left unchecked. To succeed, Hawks will lead a team of uneasy allies who must set aside their differences to overcome nearly impossible odds." You can catch the Star Wars Zero Company extended gameplay reveal at the Summer Game Fest showcase that's kicking off on Friday at 2 pm PT / 5 pm ET.
    • Until Dawn 2 revealed featuring new cast, new story, and new developer

      By noobient · Posted

      All their other games always had a new cast and new story, so that's not very surprising. The new dev is worrisome though.

  • Recent Achievements

    • One Month Later
      nothanks earned a badge
      One Month Later
    • One Month Later
      B2Proxy earned a badge
      One Month Later
    • One Year In
      MadMung0 earned a badge
      One Year In
    • Week One Done
      jefred earned a badge
      Week One Done
    • Apprentice
      JoeyNeo went up a rank
      Apprentice

  • Popular Contributors

    1. 1
      +primortal
      488
    2. 2
      PsYcHoKiLLa
      233
    3. 3
      Skyfrog
      78
    4. 4
      FloatingFatMan
      68
    5. 5
      Michael Scrip
      58
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!