Comments on: WordPress.com Blogs Vulnerable

By: Episode 38: WordPress 2.5 not released… yet! | PHP Podcasts

Episode 38: WordPress 2.5 not released… yet! | PHP Podcasts — Sat, 05 Apr 2008 13:28:51 +0000

[...] VanFossen is also jazzed about WordPress 2.5 coming to WordPress.com, details a security vulnerability for WordPress.com blogs was fixed in less than 10 minutes after initial report, Matt Mullenweg’s report that more [...]

By: Wp Wordpress » Blog Archive » Episode 38: WordPress 2.5 not released… yet!

Wed, 19 Mar 2008 00:14:54 +0000

By: DK

DK — Tue, 11 Mar 2008 17:31:23 +0000

Donncha, glad we could help my man.

By: Donncha O Caoimh

Donncha O Caoimh — Mon, 10 Mar 2008 15:31:06 +0000

Thanks for blogging this. The original blogger never contacted us with that exploit, but it’s fixed now.

By: Andrea_R

Andrea_R — Mon, 10 Mar 2008 14:14:16 +0000

What about wordpressMU? It doesn;t contain the invite.php file, but it 8does* contain users.php.

http://trac.mu.wordpress.org/browser/trunk/wp-admin/users.php

By: Matt B.

Matt B. — Mon, 10 Mar 2008 10:28:32 +0000

That’s weird. I would have thought WP.com would run the latest code…