Comments on: WordPress 2.5.1 Release Fixes Several Vulnerabilities http://blogsecurity.net/wordpress/wordpress-251-release-fixes-several-vulnerabilities Always something worth reading... Fri, 12 Mar 2010 11:09:45 +0000 http://wordpress.org/?v= hourly 1 By: DK http://blogsecurity.net/wordpress/wordpress-251-release-fixes-several-vulnerabilities/comment-page-1#comment-10969 DK Thu, 01 May 2008 12:48:34 +0000 http://blogsecurity.net/wordpress/wordpress-251-release-fixes-several-vulnerabilities/#comment-10969 I will probably wait for 2.5.2/3 before I upgrade. It really depends on the next round of fixes. I will probably wait for 2.5.2/3 before I upgrade. It really depends on the next round of fixes.

]]> By: TheShadow http://blogsecurity.net/wordpress/wordpress-251-release-fixes-several-vulnerabilities/comment-page-1#comment-10941 TheShadow Wed, 30 Apr 2008 21:59:24 +0000 http://blogsecurity.net/wordpress/wordpress-251-release-fixes-several-vulnerabilities/#comment-10941 Do you advice upgrading from 2.3.3 to 2.5.1 ? is 2.5.1 fully secure like 2.3.3.. Do you advice upgrading from 2.3.3 to 2.5.1 ? is 2.5.1 fully secure like 2.3.3..

]]> By: Chris Eng http://blogsecurity.net/wordpress/wordpress-251-release-fixes-several-vulnerabilities/comment-page-1#comment-10849 Chris Eng Tue, 29 Apr 2008 01:26:49 +0000 http://blogsecurity.net/wordpress/wordpress-251-release-fixes-several-vulnerabilities/#comment-10849 More detailed writeup of the cookie integrity vulnerability here, for anyone interested: http://www.veracode.com/blog/?p=90 More detailed writeup of the cookie integrity vulnerability here, for anyone interested: http://www.veracode.com/blog/?p=90

]]> By: .mario http://blogsecurity.net/wordpress/wordpress-251-release-fixes-several-vulnerabilities/comment-page-1#comment-10827 .mario Mon, 28 Apr 2008 15:17:53 +0000 http://blogsecurity.net/wordpress/wordpress-251-release-fixes-several-vulnerabilities/#comment-10827 In my humble opinion the approach to use filtering and sanitation on demand will never work for fast growing web applications. What WordPress needs the opposite approach - filter everything and exclude the values you are sure to be unable to cause trouble. In my humble opinion the approach to use filtering and sanitation on demand will never work for fast growing web applications.

What WordPress needs the opposite approach – filter everything and exclude the values you are sure to be unable to cause trouble.

]]> By: DK http://blogsecurity.net/wordpress/wordpress-251-release-fixes-several-vulnerabilities/comment-page-1#comment-10810 DK Mon, 28 Apr 2008 10:55:52 +0000 http://blogsecurity.net/wordpress/wordpress-251-release-fixes-several-vulnerabilities/#comment-10810 Phil, should we add this to our <a href="http://blogsecurity.net/reflections/when-to-upgrade-your-software/ " rel="nofollow"> When to Upgrade</a> article? ;) Phil, should we add this to our When to Upgrade article? ;)

]]>