WordPress, the most popular and widely used blogging platform had released an updated version Wordpress 2.6.3 after they found vulnerability in Snoopy, the PHP class that popular blogging platform uses to fetch the feeds shown in the Dashboard. The vulnerability in Snoopy can be exploited by nasty webmaster who can inject arbitrary shell commands via a script calling the function “fetch()” or “submit()”with an URL controlled by them. Thus as a preventive measure Wordpress have come up with latest version of Wordpress 2.6.3 which is safe and secure to use. 
If you dont want to download and upload full package of this latest version then you can just download 2 files which they have updated (wp-includes/class-snoopy.php and wp-includes/version.php) and just copy them over your old WordPress 2.6.2 installation.
If you want to save your time, you can just use above 2 updated files and can download and upload them on your previous Wordpress installation, no need to download/upload whole new wordpress version still having wordpress free of any vulnerability.
For more information visit : http://wordpress.org/development/2008/10/wordpress-263/
Posted under Technology Updates
This post was written by admin on November 6, 2008
