WordPress Gets Updated to V3.3.2 : Here’s What You Should Know?

April 20, 2012 by Anderson Curry in Featured, Web with 2 Comments

Team WordPress released today it’s latest update for the WordPress CMS platform. This is not a major release but more of a security fix to address the following issues.

Three external libraries included in WordPress received security updates:

Plupload (version 1.5.4), which WordPress uses for uploading media.
SWFUpload, which WordPress previously used for uploading media, and may still be in use by plugins.
SWFObject, which WordPress previously used to embed Flash content, and may still be in use by plugins and themes.

WordPress 3.3.2 also addresses:

Limited privilege escalation where a site administrator could deactivate network-wide plugins when running a WordPress network under particular circumstances.
Cross-site scripting vulnerability when making URLs clickable.
Cross-site scripting vulnerabilities in redirects after posting comments in older browsers, and when filtering URLs.

If you have modified any of your WordPress core files, here are the file that will be affected with this update.

wp-comments-post.php
wp-includes/version.php
wp-includes/js/swfobject.js
wp-includes/js/plupload/plupload.html4.js
wp-includes/js/plupload/plupload.silverlight.xap
wp-includes/js/plupload/plupload.html5.js
wp-includes/js/plupload/changelog.txt
wp-includes/js/plupload/plupload.silverlight.js
wp-includes/js/plupload/plupload.flash.js
wp-includes/js/plupload/handlers.dev.js
wp-includes/js/plupload/plupload.flash.swf
wp-includes/js/plupload/plupload.js
wp-includes/js/swfupload/swfupload.swf
wp-includes/wp-db.php
wp-includes/formatting.php
wp-includes/capabilities.php
wp-includes/kses.php
wp-includes/script-loader.php
wp-includes/ms-functions.php
readme.html
wp-admin/about.php
wp-admin/includes/update-core.php
wp-admin/plugins.php
wp-admin/press-this.php
wp-admin/setup-config.php

Here are some things you should consider before hitting the update button in WordPress.

Have you made a backup of your WordPress database and site?
Have you checked with your Webmaster or site designer to see if it’s ok to update?
Have you plug-in developers released updates that support V3.3.2 for your site.?
Has Your theme developer released and update that supports V3.3.2?

If you answered no or I’m not sure, then I would wait and see other site owners response to the update. Also make sure you have backup your site and database and know how to restore it if anything goes wrong.

About Anderson Curry

+Anderson Curry is publisher of Digital Life CEO and Managing Partner at ECS Media Interactive, an Internet marketing agency. Anderson has more than 20 years experience in the technology and marketing industries. He regularly writes and speaks on brand development, social media, technology, and the emergence of the new digital CEO.