WordPress 3.8.2 was just released.
This security update includes greater protection against potential authentication cookie forgery and a new feature to pass along the IP address of the pingback senders to help networks and hosting companies identify abuse.
There’s also a patch to address the concern that inadequate checking of a user’s capabilities, added protection against a SQL injection by Administrators via Link Manager, and protection against a possible (but unlikely) Plupload vulnerability.
You can check out further technical details about the update in the official blog post over on WordPress.org.
Because the security of your sites is extremely important to us, our technical team is auto-updating all sites hosted with WP Engine to this latest version of WordPress.
What do you need to do?…If you’re using the 3.8.x branch of WordPress, nothing! We’ll take care of it and you’ll be using WordPress 3.8.2 in no time.
Thanks for choosing WP Engine!
Hesham says
Thanks for the update, I’ve just done it on my site manually and all went great.
Kim says
Ever since the update my dashboard is so slow and I’m constantly getting the error message about “connection lost, we’re backing up the post in your browser.” How on earth do I get rid of this update? I can’t use the site effectively and have never had an issue until this time?!?! It’s driving me bonkers.
Jason Cosper says
The easiest way to sort out what is going on with your site post update is to contact our support team, Kim.
While the majority of our customers have not reported any issues, there are a handful of folks who are having some problems. When updates like this are problematic it normally means that there is a plugin or theme conflict. Our support team members have tools that can, at the very least, help them narrow down what is going on and get your issue sorted.
I’m sorry about the spotty performance post-upgrade! We’ll do what we can to get you back on track once you’ve contacted support through the proper channels.
Lorri says
You automatic update started yesterday and now my website is hardly working. Most of the auto update failed and i’ve manually updated everything but it’s all still intermittent.
Why has this done this and what do i do to fix it? I’ve manually re-installed everything, i’ve turned all the plugins off and back on again. Nothing’s working now.
Why don’t you let the users decide if we want auto updates???? You take these decisions and leave us to pick up the pieces. I do not want auto updates on anything, so give us a switch on the admin panel to turn it all to manual updates. Is that so hard to do?
In the meantime, please do tell me how to get my website fixed seeing as you broke it with your auto update.
Jason Cosper says
I am quite sorry that the automatic update broke your site, Lorri! However, this was a very large security release of WordPress. It was important that all customers received the update right away in order to keep their sites secure.
If you are seeing issues with your website, it is suggested that you file a ticket with support so our team can look at what is going on and help you sort your issues out.