One of the best things about WordPress 2.3 was the new update notifications. When there is a new version of a plugin that I use, I know about it. When there’s a new version of WordPres it’s placed at the top of my administration pages. Now even if I ignore the Dashboard (which I usually do), I still know that I need to upgrade to the newest version.  So, as the title says, WordPress 2.3.1 is now out.

There are a few new features in this release but nothing I’m all that excited about. However, according the to WordPress’ announcement, this release does include a fix for some security issues:

Unfortunately, some security issues were found in 2.3. Janek Vind found an XSS problem that can be exploited if your php setup has register_globals enabled. For this reason, upgrading to 2.3.1 is advised.

While that seems like a very specific risk, I’ve found it’s always better to be safe than sorry with this type of thing. If you didn’t upgrade, and your site was hacked, you’d be kicking yourself as well as having to repair the damage.

Related Posts