WordPress 3.5.2 released with major bugfixes

Updated: June 29, 2013 2:24 pm

Second release of wordpress 3.5 ie wordpress 3.5.2 is now available for download and upgrade from previous version ; fixing several bugs and security fixes. WordPress team has fixed 7 major security bugs and it is highly recommended by them to upgrade it to the latest version.

The security fixes included:

Blocking server-side request forgery attacks, which could potentially enable an attacker to gain access to a site.
Disallow contributors from improperly publishing posts, reported by Konstantin Kovshenin, or reassigning the post’s authorship, reported by Luke Bryan.
An update to the SWFUpload external library to fix cross-site scripting vulnerabilities. Reported by mala and Szymon Gruszecki. (Developers: More on SWFUpload here.)
Prevention of a denial of service attack, affecting sites using password-protected posts.
An update to an external TinyMCE library to fix a cross-site scripting vulnerability. Reported by Wan Ikram.
Multiple fixes for cross-site scripting. Reported by Andrea Santese and Rodrigo.
Avoid disclosing a full file path when a upload fails. Reported by Jakub Galczyk.

Latest version of wordpress can be upgraded from the dashboard or can be downloaded here.

wordpress, wordpress 3.5, wordpress 3.5 update, wordpress 3.5.2,