Oct 8, 2007
Plugin Update
Filed Under: WordPress
If you’re a fan of the FeedBurner FeedSmith plugin, which redirects all of your original WordPress feeds to FeedBurner you’ll want to upgrade immediately as a potential security vulnerability had been uncovered.
Some WordPress plugins that permit the entry of user-entered values, such as older versions of FeedSmith, can be vulnerable to what is called a “cross-site request forgery.” Without getting overly technical, this permits someone to change WordPress plugin settings on your system without you noticing during the time you are signed into your WordPress control panel. And no one wants that.
You can get version 2.3 of the plugin from FeedBurner here.
2 Comments so far. Click here to join the discussion!
Werner Patels
I have really grown wary of plugins and widgets. Not only do they pose a risk, as your story shows, but they also tend to slow down the download of one’s blog.
Oct 8th, 2007
Len Kutchma
Hi Werner,
Actually I’ve never been a huge fan of widgets as I prefer hand coding. With respect to plugins they certainly can be exploited. WordPress, being coded in PHP, can be somewhat vulnerable to unscrupulous persons.
And I agree that too many gadgets can adversely affect load times.
Oct 8th, 2007
Reply to “Plugin Update”
Please note: Comment moderation is in effect. It may take some time for your comment to appear. There is no need to resubmit it.
Off-topic comments, personal attacks, obvious spam and support requests will likely not make it out of moderation. This site does not necessarily endorse or agree with comments left here.