Variation 3.0.4 of WordPress, readily available right away via the upgrade web page in your control panel or for download here, is an extremely crucial upgrade to relate to your websites asap due to the fact that it solutions a core safety and security pest in our HTML hygiene collection, called KSES. I would certainly rank this launch as “crucial.”
This concern impacts all variations of WordPress before 3.0.4, so if you are still on a 2.X launch you require to upgrade also.
I understand an upgrade throughout the vacations is no enjoyable, however this set deserves taking down the eggnog for. In the spirit of the vacations, think about assisting your close friends also.
If you are a safety and security scientist, we would certainly value you taking a look over this changeset also to examine our upgrade. We have actually offered it a great deal of idea and also testimonial however given that this is so core we desire as several minds on it as feasible. Many thanks to Mauro Gentile and also Jon Cave (duck_) that found and also informed us to these XSS susceptabilities initially.