Wordpress 2.3.3 released! Update quickly for a security fix.

06 Feb

Posted by silkenhut in Wordpress |

Hi! I'm Allen and I welcome you to my blog. I blog mainly about my blogging experiences where I get to learn how to earn money online through blogging and have fun doing so. To learn more about my blog, you may want to subscribe to my RSS feed. If you have some questions, feel free to ask me by using my contact form. Thank and have a nice day.

Update Wordpress

Wordpress 2.3.3 was released yesterday and I suggest that you should update immediately.

WordPress 2.3.3 is an urgent security release. If you have registration enabled a flaw was found in the XML-RPC implementation such that a specially crafted request would allow a user to edit posts of other users on that blog. (Source)

As of now, I’m still doing the upgrade and trying to find out which files you need to replace. But one thing for sure, you need to replace the xmlrpc.php file since this is the focus of the wordpress 2.3.3 fix.

Update: Here are the files that you need to replace and add to your wordpress installation. Remember to backup first before doing any upgrade or update.

Files to replace in wordpress 2.3.3

/xmlrpc.php

/wp-includes/gettext.php
/wp-includes/pluggable.php
/wp-includes/version.php

Files to add in wordpress 2.3.3

/wp-admin/install-helper.php

Popularity: 2% [?]

Share and Enjoy:

8 Responses

sylv3rblade (27 comments.)

February 6th, 2008 at 1:20 pm
1

hmm.. I guess I’ll just update the security patch of the XML-RPC.

sylv3rblade’s last blog post..Geeks and Valentines #2: Date ideas
Allen (689 comments.)

February 6th, 2008 at 8:54 pm
2

@sylv3rblade - Hi sylv3rblade, that’s the gist of the update but you can also update the version.php file or else, wordpress is going to keep bothering you to update.
Dexter | Techathand.net (63 comments.)

February 6th, 2008 at 10:35 pm
3

Kelangan ba talaga iupdate kasi di naman multi user blog ko..

Dexter | Techathand.net’s last blog post..WordPress Update : WordPress 2.3.3 Release
Kirbitz | Pinoy Money Blogger (6 comments.)

February 7th, 2008 at 6:52 am
4

I dont know how to back-up wordpress. help!

Btw, Allen, I added your blog to my blogroll already!

http://pinoymoneyblogger.com/links

If its not much of a trouble please change mine to “Pinoy Money Blogger”.

Im targeting this one kasi and trying out an experiment. Thanks allen!
Kirbitz | Pinoy Money Blogger’s last blog post..Two Solid Ways To Get Links To Your Blog
Allen (689 comments.)

February 7th, 2008 at 9:03 am
5

@Dexter - Hi Dex, although it may not affect us single users, it’s still best to update. and besides, that message “Your WordPress 2.3.2 is out of date. Please update.” won’t stop unless we do.

btw, just a question Dex, in your blog, I noticed a related post by category in your sidebar, is that a plugin? thanks.
Allen (689 comments.)

February 7th, 2008 at 9:06 am
6

@Kirby Hi Kirby, you may want to check my archives or the category blog tech tips. I have outlined several ways to back up your blog especially wordpress.

I’ll edit you in the blogroll provided you come and visit this blog alot! haha just kidding
glitch (1 comments.)

February 14th, 2008 at 4:04 pm
7

Thank you, update done. Medyo newbie pa sa updates eh, check ko lang files na mention mo at yu ang pinalitan ko.

glitch’s last blog post..Valentine’s Day Quote SMS Made Easy
Allen (689 comments.)

February 15th, 2008 at 11:27 am
8

@glitch - I’m glad it worked for you. Btw, wordpress 2.5 is coming out soon. I’ll be sure to make an update guide for it. Check back soon.