WordPress 2.9.2 has just been released. This closes a hole where logged-in users can see trashed posts belonging to other users. If you have a multi-author blog where some bloggers may leave sensitive posts in the trash, you'll want to upgrade asap. (And yes, it's probably a fairly uncommon scenario, but upgrade anyway - it's a good habit to be in.)

If you don't see the upgrade link on your dashboard yet, go to Tools > Upgrade and use the link from there.

Tags: WordPress 2.9.2

Posted by Sue on February 15, 2010 in WordPress.