WordPress 2.8.2 has been released, the new version include an important security update and some other minor bugs fixes. Anyone using or powering a blog using WordPress 2.8 or 2.8.1 should upgrade to this latest version as soon as he can.
WordPress 2.8.2 fixes an XSS vulnerability. Comment author URLs were not fully sanitized when displayed in the admin. This could be exploited to redirect you away from the admin to another site. Download 2.8.2 or automatically upgrade from the Tools->Upgrade page of your blog’s admin
Only 10 files will be changed while upgrading and the database wouldn’t be touched. All what you have to do and required is a simple upload and replace, or you can simply use the auto upgrade feature built into the WordPress admin area.
August 15th, 2009 at 7:20 am