3.0 security patch released

[boccio]

A critical vulnerability has been found in phpWordPress, which can be exploited by malicious people to conduct SQL injection attacks.

The vulnerability allows attackers to manipulate input passed to the "poll", "category", and "ctg" parameters in "index.php". This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

The patch can be downloaded from this location.

[Elton]

I purchased Word Press after this date - will the copy I received already have this patch applied?

[Mark]

Yes, all phpWordPress versions after December 1, 2005, come with this patch included.

[Elton]

Thanks, Mark