WordPress 3.8.2 Security Release

Disclosure: We are a professional review site that receives compensation from the companies whose products we review. We test each product thoroughly and give high marks to only the very best. We are independently owned and the opinions expressed here are our own.

Yesterday, April 8th, 2014, WordPress released their latest updated. WordPress 3.8.2 is a security release and its recommend that you update to this version. If you have auto updates configured then you should have received an email that your sites were updated. If not update them ASAP.

WordPress 3.8.2 Security Release

Below is the import information taken directly from the WordPress blog about this update. Image Source: Flicker

“This releases fixes a weakness that could let an attacker force their way into your site by forging authentication cookies. This was discovered and fixed by Jon Cave of the WordPress security team.

It also contains a fix to prevent a user with the Contributor role from improperly publishing posts. Reported by edik.

This release also fixes nine bugs and contains three other security hardening changes:

• Pass along additional information when processing pingbacks to help hosts identify potentially abusive requests.
• Fix a low-impact SQL injection by trusted users. Reported by Tom Adams of dxw.
• Prevent possible cross-domain scripting through Plupload, the third-party library WordPress uses for uploading files. Reported by Szymon Gruszecki.”

For the the complete article about the update check it out here.