The first Wordpress 2.3 security issue has been found. It is in regard to the blogroll function in Wordpress and results in unlimited spam entries being injected into your blogroll. This vulnerability is already being exploited by spammers. An explanation and a fixed file can be found here until a new point release of Wordpress is available. This issue apparently also affects older versions of Wordpress as well as the newest version, so pretty much anyone using the blogroll on their site should immediately address this issue.

ShareThis