Although Wordpress 2.7 will be release soon, but the Wordpress team still continue support and fix Wordpress 2.6’s bugs. They just released Wordpress 2.6.3, which fixed the vulnerability found in Snoopy library. The Snoopy library is being used to fetch feed shown in admin dashboard.

According to the Wordopress team, hacker can use this vulnerability to execute shell command and hack your Wordpress server. Anyway, this is just a small fix. Instead of downloading the full package, you may download these two files and upload to your server:

• wp-includes/class-snoopy.php
• wp-includes/version.php

Tags: dashboard, fix, upgrade, vulnerability, Wordpress, wp