Wordpress Server Hacked, 2.1.2 Upgrade Released

Yesterday, WordPress users cringed when they saw these words posted within the blogging platform’s dashboard:

WordPress 2.1.1 dangerous, Upgrade to 2.1.2

It was reported that a hacker managed to sneak into the Wordpress server and modify the code in the 2.1.1 release, introducing an exploit that would allow for remote PHP execution. Although the 2.1.1 package does not seem to have been compromised when it was initially released, WP encourages all users to upgrade to 2.1.2 to patch the security hole. WordPress.org summarized the issue:

Long story short: If you downloaded WordPress 2.1.1 within the past 3-4 days, your files may include a security exploit that was added by a cracker, and you should upgrade all of your files to 2.1.2 immediately.

The 2.1.2 release is the fifth WordPress release announcement this year.

Source: digg.com