The Easiest Way to Upgrade WordPress 2.6.2 into 2.6.3

WordPress 2.6.3 has been officially announced a few days. According to the announcement, the problem occurred on the snoopy library, which used to fetch the feeds shown in the Dashboard on the Administration Panel.
It’s a few update anyway, which only related to the vulnerability as reported by Secunia Advisories.

A vulnerability has been discovered in Snoopy, which can be exploited by malicious people to compromise a vulnerable system.
Input passed to the “_httpsrequest()” function isn’t properly sanitized before being used in an “exec()” call. This can be exploited to inject arbitrary shell commands via a script calling the “fetch()” or “submit()” function with an URL controlled by the attacker.

Although it was a small and low-risk vulnerability, it should be better to upgrade the engine into latest version to prevent any malicious usage. If so, how to easily upgrade WP 2.6.2 into WP 2.6.3 ?

  • SSH into remote server where blog has hosted
  • Navigate into wp-includes folder
    [code language=’cpp’]wget -m -nd
    wget -m -nd[/code]

If you have no access to the SSH account, replace the above file using FTP client.

One thought on “The Easiest Way to Upgrade WordPress 2.6.2 into 2.6.3

Leave a Reply

Your email address will not be published. Required fields are marked *