The folks over at Automattic must be going crazy this last month or so. They’ve released 3 versions of WordPress without any real new features, just to fix URGENT bugs.

Once again, please upgrade your WordPress installation to 2.8.4 to patch a potential security problem.

This time, a bug in the tool to reset your password lets a person with “evil intent” reset your password without triggering a send to you, effectively locking you out of your blog. Not the end of the world, but annoying! Especially if you’re not aware of how to reset it either manually using PHPMyAdmin or another tool, or the WordPress password reset tool (not the built-in one).

As always, I am available to do your upgrade/maintenance for you. If you need your password reset, use my contact form and I’ll reset it for free.