A critical security update was released for WordPress yesterday.
MidState Design takes the security of your website(s) very seriously and does a variety of things, such as this update, to ensure it remains free of malware. (e.g. viruses).
The following excerpt is from the official WordPress press release:
————–
“This maintenance release fixes 13 bugs in version 3.6, which was a very smooth release.
WordPress 3.6.1 is also a security release for all previous WordPress versions and we strongly encourage you to update your sites immediately. It addresses three issues fixed by the WordPress security team:
Block unsafe PHP unserialization that could occur in limited situations and setups, which can lead to remote code execution. Reported by Tom Van Goethem. Prevent a user with an Author role, using a specially crafted request, from being able to create a post “written by” another user. Reported by Anakorn Kyavatanakij. Fix insufficient input validation that could result in redirecting or leading a user to another website. Reported by Dave Cummo, a Northrup Grumman subcontractor for the U.S. Centers for Disease Control and Prevention.
Additionally, we’ve adjusted security restrictions around file uploads to mitigate the potential for cross-site scripting.”
(The full release is viewable at http://wordpress.org/news/
————-
Not yet a client of MidState Design? What are you waiting for?
Contact Corey Today!
