SQL Injection in WordPress 2.1.1

« 1 March 2007 | 15:47 | Security | 2 Comments | 2,975 Views »

Upgrading to wordpress 2.1.1 was urgent, but we still have SQL injections, path disclosures and cross site scripting problems in this version! My colleague Sebastian Krause has some examples: