Thursday, September 13. 2007
Once again Wordpress has released a new update that fixes several security flaws in earlier version. Among the current fixes is a fix for a remote SQL injection. Attacker can get access to account data. I really like the functionality and extensibility of Wordpress. However this constant flow of critical security fixes does not help to raise the level of thrust into the quality of that product. Come on, developers. SQL injections are well known and easy to prevent in 99%. Where is your quality testing?
Trackback specific URI for this entry