After over a million downloads of WordPress 2.9 and lots of feedback from all of you, we’re releasing WordPress 2.9.1. This release addresses a handful of minor issues as well as a rather annoying problem where scheduled posts and ping backs are not processed correctly due to incompatibilities with some hosts. If any of these issues affect you, give 2.9.1 a try.

Get the new Wordpress version and get rid of some annoying problems from older versions.

The first problem is an XSS vulnerability in Press This discovered by Benjamin Flesch.

The second problem, discovered by Dawid Golunski, is an issue with sanitizing uploaded file names that can be exploited in certain Apache configurations.

Visit wordpress.org/download/ to get your updated wordpress.

This bug allows the attacker to bypass a security check, to verify a user requested a password reset. so the admin account without a key in the database would have its password reset directly. This new password would be emailed to the account owner email address.

Sample :
The attackers use the below url to exploit.

http://www.yourwebsite.com/wp-login.php?action=rp&key[]=

and the password will be reset and send to your email id.

Wordpress says,

Yesterday a vulnerability was discovered: a specially crafted URL could be requested that would allow an attacker to bypass a security check to verify a user requested a password reset. As a result, the first account without a key in the database (usually the admin account) would have its password reset and a new password would be emailed to the account owner. This doesn’t allow remote access, but it is very annoying.

For more : Visit Wordpress Blog

Here are some of the Fixes in Wordpress 2.8.1 :

* Certain themes were calling get_categories() in such a way that it would fail in 2.8. 2.8.1 works around this so these themes won’t have to change.
* Dashboard memory usage is reduced. Some people were running out of memory when loading the dashboard, resulting in an incomplete page.
* The automatic upgrade no longer accidentally deletes files when cleaning up from a failed upgrade.
* A problem where the rich text editor wasn’t being loaded due to compression issues has been worked around.
* Extra security has been put in place to better protect you from plugins that do not do explicit permission checks.
* Translation of role names fixed.
* wp_page_menu() defaults to sorting by the user specified menu order rather than the page title.
* Upload error messages are now correctly reported.
* Autosave error experienced by some IE users is fixed.
* Styling glitch in the plugin editor fixed.
* SSH2 filesystem requirements updated.
* Switched back to curl as the default transport.
* Updated the translation library to avoid a problem with mbstring.func_overload.
* Stricter inline style sanitization.
* Stricter menu security.
* Disabled code highlighting due to browser incompatibilities.
* RTL layout fixes.

Update your Wordpress version and get rid of bugs specified above.

Whats new in 2.7 beta 2 :

These are the fixes from Beta1 version described in the blog .

1. The Upload button didn’t always show. Fixed.
2. JS on the Dashboard broke for blogs with no comments, causing several UI elements to “freeze”. Fixed.
3. Recent Drafts Dashboard module didn’t show correct times. Fixed.
4. Various Autosave fixes.
5. Redirect after deleting a page from the editor went back to the deleted page. Fixed.
6. Fixed loading of translations for default TinyMCE plugins.
7. Added avatars to the edit users list.
8. Added some missing translations.
9. Fixed some validation errors.
10. Fixed some PHP warnings and notices.
11. Handle inconsistent file permissions during auto upgrade
12. Change Publish box layout to better accommodate internationalized text
13. Fix quick editing of the last page in the Edit Pages list
14. Fix Screen Options for IE
15. Fixes for choose tag from tag cloud
16. Rewrite rules fixes for certain hosts
17. Don’t check for updates on every page load
18. Easier post box dropping
19. Preview fixes
20. RTL fixes
21. Fixed broken wp-mail
22. Plugin update and install fixes
23. First draft of contextual help tab

Screenshots :

Reference :

http://wordpress.org/development/2008/11/wordpress-27-beta-2/

Url : http://rockstartemplate.com/demo/

How To use the Blog ::

• You will find a THEME SWITCHER Option at the sidebar .
• Choose your Desired Theme and Preview .

Go to the above url to view all of our free wordpress theme . Move on ,

Features :

• Premium Like Wordpress Template.
• Ad Block Spaces – Ad Spaces .
• 3 column and Fully WIDGET-ised  sidebars
• Easy Editable Code.
• and It’s totally FREE .

Screen Shot :

Preview This Template | Download This Template

Comment about this template , and If you like this post subscribe to our Feed .

Preview this Template | Download This Template

Features :

• Well designed CSS.
• Stylish Looks
• Default Search Bars
• AD Optimized for 300*250 and 125*125 ad format .

This Wordpress theme have a  default search bar , 3 column , and an stylish design . This blog is optimised for people who do small business online . More Shiny series will be released this month .See the Wordpress Gallery to browse other Wordpress templates .

Preview this Template | Download This Template

This Template is very much similar to the normal wordpress themes , having default search bar , 3 column , stylish design . If you are a webmaster and searching for a black designed template , go for this theme .

If you have any queries regarding this template , comment here . If you like this post then , Subscribe to our Feed . Stay tuned for more updates .