WordPress.org announced a new release for the WordPress content management system on Thursday, Nov 20. This release, identified as a critical security release, is now available for download from WordPress.org. All of our maintenance & support customers were automatically updated last evening and verified operational.
If you are running a WordPress 4.0 website and have not updated to this version, you are urged to do so as soon as you are able. If your site is running an older 3.x version of WordPress, give us a call and Cap Web Solutions can can hook you up with the upgrade.
The details about this critical cross-site scripting vulnerability can be found in the press release linked above. Sucuri, the website antivirus & firewall security experts, offer thoughts on this vulnerability in a recent blog post, which they classify as one of the most common attacks facing today’s websites.
Here again, Cap Web Solutions maintenance customers are regularly scanned by Sucuri tools to reduce and eliminate malware, insure firewall protection is in place and identify potential vulnerabilities.
Is site protected? Do you need any help with properly safeguarding your web presence? Let us know how we can help.