CERT mailing list archives

WordPress Releases Security Update


From: "US-CERT" <US-CERT () ncas us-cert gov>
Date: Tue, 08 Jul 2014 12:06:20 -0500

NCCIC / US-CERT

National Cyber Awareness System:

WordPress Releases Security Update [ 
https://www.us-cert.gov/ncas/current-activity/2014/07/08/WordPress-Releases-Security-Update ] 07/08/2014 12:26 PM EDT 
Original release date: July 08, 2014

WordPress 3.8.2 has been released to address multiple vulnerabilities, one of which could allow an attacker to gain 
unauthorized access using forged authentication cookies.  WordPress 3.7.1 users will be updated to 3.7.2, which 
contains the same security fixes as 3.8.2. Users operating older, unsupported versions of WordPress are encouraged to 
upgrade to 3.8.2.

US-CERT recommends users and administrators review the WordPress Maintenance and Security Release blog [ 
http://wordpress.org/news/2014/04/wordpress-3-8-2/ ] and apply the necessary updates.

________________________________________________________________________

This product is provided subject to this Notification [ http://www.us-cert.gov/privacy/notification ] and this Privacy 
& Use [ http://www.us-cert.gov/privacy/ ] policy.

________________________________________________________________________

OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ 
http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ 
http://www.us-cert.gov/related-resources ] 

STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ] 


Current thread: