• Skip to main content
  • Skip to primary sidebar
  • Home
  • Services
  • Portfolio
  • About
  • Contact
Watershed Studio, LLC

Watershed Studio, LLC

Indianapolis sports & event photography, podcasting, and social media creation.

WordPress 2.8.4

August 14, 2009 by Brian Groce

WordPress 2.8.4 was released on August 12th, 2009 as is a security release.

Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.

We fixed this problem last night and have been testing the fixes and looking for other problems since then. Version 2.8.4 which fixes all known problems is now available for download and is highly recommended for all users of WordPress.

Schedule your WordPress upgrade today via our WordSprung WordPress Upgrade Service.

Filed Under: Server Side Software, WordPress

Primary Sidebar

Contact Watershed Studio

Copyright © 2005-2025 Watershed Studio LLC