
For one, WordPress 2.6 introduce in July had eliminated much of the security loop holes in their predecessor, among them redirection hack and the ability for preying eyes to see the content of plugin. Don’t mistaken the upgrade from 2.6 to 2.6.1 as a security fix because it actually a minor upgrade release.
2.6.1 offers several improvements for international users. Styling of the admin for right-to-left languages is much improved thanks to the efforts of the Farsi and Hebrew translation teams, and a mysterious gettext bug caused by certain PHP configurations is now fixed. For IIS users, 2.6.1 fixes several permalink problems. Image insertion problems in the Press This feature experienced by IE users are also fixed. Of note to everyone is a fix for a performance bug in the admin where those with a lot of plugins would experience slowness on some pages.
So if you happy with version 2.6 like me, then you don’t need to upgrade.
Although WordPress 2.6 more secure, it is not an accuse to be complacent. You still need to maintain basic security measure for your WordPress. Last July, Kulpreet Singh had the opportunity to look into wordpress security and present his finding at WordCamp Fraser Valley event on Wednesday, July 16th.
He point out that among the consequence from lack of wordpress security will be:
He further reiterate the more popular your wordpress blog the more vulnerable and attractive for hacker to attack your blog. He shares his view on these matters in his slide below.
Feel free to left comment for Kulpreet at Slideshare and your own opinion about wordpress security in the comment below.
Popularity: 6% [?]