Episode 34: WordPress 2.3.3 released, more security problems and Prologue

Posted on February 14, 2008 by Charles Stricklin | 12 Comments
Play

Podcast: Play in new window | Download

Okay, so I’m a few days late getting this episode out, but at least it’s not 2 months late!

Covered in this episode:

  1. WordPress 2.3.3 released: This urgent security release fixes one security bug and several other minor bugs. The security bug affects only blogs that allow users to register: A flaw was found in the XML-RPC implementation a hacker could use to gain access to and edit posts of other users.
  2. Several plugins have recently been found to have security vulnerabilities, such as WP-Footnotes v2.2 has cross-site scripting problems. register_globals must be turned on before array elements could execute unsanitized HTML to exploit the plugin. Other plugins with problems: WordsPew v3.x reported an “id” based SQL injection vulnerability, dmsguestbook 1.7.0, st_newsletter 2.x, WP-Cal, Adserve Plugin version 0.2, and WP-Forum 1.7.4
  3. Is WordPress Insecure by Design?
  4. Prologue is a Twitter-like theme released by Automattic, great for inter-organizational microblogging.
  5. Design Canopy has released a theme along with a set of instructions that allows you to use WordPress install as a taggable, searchable contact manager that can be made into a Members Only system and display related contacts.
  6. The addition of WordPress in the Kazakh language brings to 58 the number of languages WordPress covers.
  7. Calais is offering a $5,000.00 bounty to anyone who can develop a plugin that does specific things involving tags.
  8. WordCamp Hamburg (Germany) was a success. “It was a very lively camp with excellent sessions, intense socializing and networking.”
  9. WordPress.com adds more statistics features for tracking your blog stats. You can now see summarized stats for referrers, search terms, and clicks in addition to blog posts.
  10. Content Theft and WordPress explains the difference between WordPress.com and WordPress and reporting copyright violations.
  11. Automattic introduces the Prologue WordPress Theme on WordPress.com.
  12. There are now 3 gigabytes of free storage on WordPress.com blogs.
  13. More WordPress and WordPress.com news on the Blog Herald
This entry was posted in Podcast. Bookmark the permalink.

12 Responses to Episode 34: WordPress 2.3.3 released, more security problems and Prologue

  1. Pingback: Blogging Pro » Blog Archive » WordPress Podcast: Episode 34

  2. David says:
    February 15, 2008 at 2:00 am

    The ad was a bit jarring… But other than that, a great episode.

  3. Pingback: Blogging News Blog » WordPress Podcast: Episode 34

  4. Charles Stricklin says:
    February 15, 2008 at 2:57 am

    I need to find a way to ease into those ads a bit. Podango Show Builder just stitches everything together according to a script I write.

  5. Pingback: PlagiarismToday - » WordPress Podcast - Episode 34

  6. Eduardo Ponce says:
    February 15, 2008 at 2:30 pm

    I finally sept up WordPress ofr my site. This is a very powerful tool and the possibilities are endless!

    Thanks

    Eduardo Ponce
    http://www.todoporrua.com

  7. Joost de Valk says:
    February 15, 2008 at 4:20 pm

    Great to get you weekly Charles! Ping me if you ever want to do a show on WordPress search engine optimization :)

  8. Pingback: WordPress Podcast Episode 34 » Jeffro2pt0

  9. webhosting says:
    February 17, 2008 at 6:23 am

    I’m currently using the new wordpress 2.3.3 it took me time to set up and therefore my search engine traffic has also dropped. I suspect it’s to do with the hosting company i use. Anyway the new wordpress 2.3.3 looks neat. I don’t know much about bugs so i could comment. lol

  10. Pingback: WordPress Wednesday News: WordPress 2.5 News, Colleges and Schools Love WordPressMU, Viddler Meets WordPress, Theme Buyers Beware, Columns in Blog Posts, Feeds Without Plugins : The Blog Herald

  11. Pingback: WordPress Wednesday News: WordPress 2.5 in Two Weeks, New Hot Media Library, Instant Upgrades, Theme Designers Lack Inspiration, More Plugin Vulnerabilities Found : The Blog Herald

  12. Duvar Kagidi says:
    March 2, 2008 at 6:56 am

    est il availible en Francais, my English not good