Variation 3.0.4 of WordPress, offered right away with the upgrade web page in your control panel or for download here, is an extremely essential upgrade to put on your websites asap due to the fact that it repairs a core safety and security insect in our HTML cleanliness collection, called KSES. I would certainly rank this launch as “important.”
This concern influences all variations of WordPress before 3.0.4, so if you are still on a 2.X launch you require to upgrade too.
I recognize an upgrade throughout the vacations is no enjoyable, however this set deserves taking down the eggnog for. In the spirit of the vacations, think about assisting your buddies too.
If you are a safety and security scientist, we would certainly value you taking a look over this changeset too to assess our upgrade. We have actually offered it a great deal of idea and also evaluation however considering that this is so core we desire as lots of minds on it as feasible. Many thanks to Mauro Gentile and also Jon Cave (duck_) that uncovered and also informed us to these XSS susceptabilities initially.