WordPress 2.5.1 Security Update

by Jeremy Schoemaker on April 25, 2008 · 54 comments

upgrade your wordpress now:

We recommend everyone update immediately, particularly if your blog has open registration. The vulnerability is not public but it will be shortly. In addition to the security fix, 2.5.1 contains over 70 bug fixes.

About the author...

– who has written 2415 posts on ShoeMoney.com.

Hi I am Jeremy Schoemaker and ShoeMoney.com is my blog. 99% of the post here are done by me but you will see others occasionally make guest posts. This blog is fun to write but for my day job I run several online companies.

Images provided by ShutterStock


Mark recommends you read these posts also:

  1. cash How To Make $100 A Day With An Info Product (Part 4)
  2. news Getting Press for Your Website, Application, or Service
  3. trump-youre-fired How To Fire Someone

{ 53 comments… read them below or add one }

1 Meethere April 25, 2008 at 1:13 pm

OMG… so many bugs.
I should have not upgraded.
I dont like the interface too.

Reply

2 Clog Money April 25, 2008 at 1:14 pm

Sigh… I literally upgraded to 2.5 yesterday. Why is that always the way?

Reply

3 Clog Money April 25, 2008 at 1:16 pm

I think the interface is great. I personally love to see people/organizations trying to push technological boundaries. I also think wordpress as a platform is an ideal project in which to encompass these new technologies.

Reply

4 ShoeMoney April 25, 2008 at 1:18 pm

it takes 2 seconds ;) not that difficult

Reply

5 Thiago Prado April 25, 2008 at 1:28 pm

I’ll upgrade right now. How can I change the theme for WP 2.5?

Reply

6 Chris Jacobson April 25, 2008 at 1:28 pm

I upgraded to 2.5.1 in about 2 seconds like Shoe said… auto upgrade plugin FTW!

Reply

7 Scoopdogg April 25, 2008 at 1:32 pm

Grrr. I, too, just finished upgrading to 2.5 for all of my sites (due to hackers inserting malware into my php) and each time it took at least 20 minutes for each and I had to redo all the header and footer code and re-ftp the custom header and mess with plugins and some other crap.
Thanks for the info.

Reply

8 androo April 25, 2008 at 1:34 pm

ahhh yes… and this is why I have yet to update my wordpress.. even though it takes like 2 seconds.. i shall still wait about a month more till i update.. :)

Reply

9 Paul April 25, 2008 at 2:20 pm

Thank you for the update.

Reply

10 5.Steps.To.Improve.Your.Success April 25, 2008 at 2:44 pm

I will update soon. I like the new version but I care about security too.

Reply

11 Jason Poteet April 25, 2008 at 3:08 pm

I heart Subversion!

Reply

12 Hustle Strategy April 25, 2008 at 4:30 pm

for who? is fantastico up to date? seems most places have not updated the panel/fantastico combo if fantastico is up to date…

Reply

13 Carla Alvarez April 25, 2008 at 4:53 pm

Thanks for the update. I caught it on your Twitter feed.

Reply

14 Mike1115 April 25, 2008 at 5:24 pm

Install the Auto Upgrade plugin. Press the button and upgrade.

Reply

15 RT April 25, 2008 at 5:59 pm

Do you know where i can get good instructions for upgrading without fantastico?

Reply

16 Hypnosis Dude April 25, 2008 at 6:08 pm

Very easy upgrade, even though I upgraded manually. I’ll definately be looking into the upgrade plugin though

Reply

17 Terry Tay April 25, 2008 at 8:33 pm

It is simple to upgrade even without the auto upgrade plugin, although I’m not as fast as those of you who do it in 2 seconds. :-P
~Terry

Reply

18 Melvin April 25, 2008 at 9:39 pm

70 bug fixes! wow…

Reply

19 Michael D April 25, 2008 at 10:08 pm

It only sucks when your installed with services like fantastico that seem to take weeks to show changes in current versions for install / upgrade.

Reply

20 Clog Money April 26, 2008 at 3:41 am

Where is this mysterious auto update plugin you speak of? I could of course do a quick google search for this,. However it’s saturday morning I’m hungover and feeling lazy :)

Reply

21 Nancy P Redford April 26, 2008 at 5:46 am

Hey I know how you guys feel with the tedium of upgrade but remember they are usually months apart and essential to keep your site secure from Malware and Hackers.

Think of it as just another day in the life of a blogger! ;-)

Reply

22 Griffology April 26, 2008 at 12:20 pm

Update only took less then a few mins. It was painless-

Reply

23 Chetan April 26, 2008 at 2:38 pm

Read about this in many other blogs too.. Will have to upgrade now!

Reply

24 CPA Affiliates April 26, 2008 at 3:01 pm

wwwwwow lots of bugs got squashed with this update!

Reply

25 Terry Tay April 26, 2008 at 8:02 pm

I just had to log on to wordpress to know about it since it says right up top when your Wordpress version needs updating, but it’s good when blogs post it I guess for those that don’t read their dashboard when they log in :-D

Reply

26 Meethere April 27, 2008 at 2:29 am

How to do this upgrade ?
fantastico – still not available…

Reply

27 Hammad April 27, 2008 at 5:06 am

thanks for the update man y i upgraded to 2.5 :S i have to upgrade it again now :S

Reply

28 Kevin April 27, 2008 at 7:01 am

In fact, it is very easy!

Download wordpress 2.5.1
Upload it on your web folder
Go to /wp-login
Press a Button
Done!

Reply

29 Dr. Bardou April 27, 2008 at 11:16 am

OMG! Do you want to say that 2.5 has 70 bugs? Is that why there is SEVENTY bug fixes in 2.5.1.?
O_O
Updating is the urgent case!

Reply

30 jim April 27, 2008 at 11:26 am

Damn updates are annoying

Reply

31 David Marx April 27, 2008 at 2:51 pm

It is awesome to see the enthusiasts and users of a tool like wordpress interact and inform each other of important updates and the like. Truly viral in my opinion.

Reply

32 Web Marketeer April 27, 2008 at 2:54 pm

Progress won’t necessarily appeal to everybody, but eventually everybody will haqve to upgrade to stay current with technology streams. Be happy that this is not a Microsoft product. Can you imagine?

Reply

33 Keith Cash April 27, 2008 at 4:34 pm

Thanks for the heads up I will use.

Reply

34 riza April 27, 2008 at 4:45 pm

yes right, update wordpress will also increase for security blog

Reply

35 Laptop Best Buys April 27, 2008 at 5:42 pm

Great info here, thanks!

Reply

36 John Chan April 28, 2008 at 4:36 am

But it makes slow when you post your posting. Have any body face the same problem with me?

Reply

37 Flimjo April 28, 2008 at 9:11 am

I’m not liking Wordpress 2.5 anyway. I feel like 2.3 was more user-friendly.

Reply

38 Flimjo April 28, 2008 at 9:12 am

It seems like they come up with one every two weeks.

Reply

39 Flimjo April 28, 2008 at 9:13 am

That’s the annoying bit. Fantastico is always a week or so behind the curve.

Reply

40 Tim April 28, 2008 at 12:52 pm

Is there an easier way to upgrade? I”ve only done it once, and it took quite a while since I don’t know what I’m going. ;-) Back up first, then delete, then reinstall, then re-import.

Reply

41 John April 28, 2008 at 1:20 pm

Looks like it was already found a bug in 2.5.1. When you forget your password, ask for a new one and WP sends you a link to click. this links don’t work.

Reply

42 Asia'h Epperson April 30, 2008 at 4:27 pm

I wish I hadn’t upgraded to 2.5. I knew better. Every upgrade they come out with is followed by security and bug fixes!

Reply

43 Mayank Rocks May 1, 2008 at 10:53 am

I have no idea but my comments arent appearing with name “Mayank”…so I am trying back the old name “Mayank Rocks”

Reply

44 Mayank Rocks May 1, 2008 at 10:54 am

I havent even upgraded to 2.5 yet….I am still waiting, for like dunno what lol. I think I will do it this weekend or next week….and what is this auto upgrade plugin? please help.

Reply

45 Bahamas Hosting May 1, 2008 at 2:19 pm

It’s nice to see the gravatar built into the 2.5 versions.

Reply

46 Goran Website May 1, 2008 at 3:31 pm

hahah, imaging if it was Microsoft. Well at least Wordpress takes responsibility and updates regularily

Reply

47 Row May 2, 2008 at 12:22 am

Hey Shoe, you posted earlier about the issue of pre-2.33 blogs being compromised by the hijacking of the admin cookie. You recommended a *clean* install of 2.33, rather than an upgrade to 2.33.

Fast forwarding to now, if my 2.33 blog was infected with SQL injected spam in the same way as above, should I do a *clean install* of 2.5.1, or will simply *upgrading* to 2.5.1 solve the problem?

Thank you sire!

Reply

48 stress May 4, 2008 at 7:42 pm

i really like the very last version!

Reply

49 Prosperity Writer May 5, 2008 at 2:31 am

this is why i stuck with the version that best suits me

Reply

50 Clive May 5, 2008 at 7:01 am

How can i make money i have no income at all.

Reply

51 TEGS May 6, 2008 at 6:32 pm

You have to stay up to date.
Or be thrown int a pit of haxors who will have their way with your site
menacing laugh

Reply

52 XLOR May 7, 2008 at 1:02 pm

Sorry, where did you get this plugin?

Reply

53 XLOR May 7, 2008 at 1:04 pm

Hm, not bad…guys are not sleeping.
A week ago I got 2.5 version…now it is time to get 2.5.1…or to wait for 2.5.2 better???

Reply

Leave a Comment

Previous post:

Next post: