ThemeLab's Blog

Stay up to date with our newest WordPress themes, WordPress plugins, WordPress tutorials, and other announcements.

WordPress 2.8.5 Released

Last Updated on by

It was just announced yesterday that WordPress 2.8.5 has been released, which is considered a “security hardening” release. Here are some of the updates and fixes:

  • A fix for the Trackback Denial-of-Service attack that is currently being seen.
  • Removal of areas within the code where PHP code in variables was evaluated.
  • Switched the file upload functionality to be whitelisted for all users including admins.
  • Retiring of the two importers of tag data from old plugins.

If you’re wondering what the difference between a “hardening release” and a “security release” is, I don’t think there is any. The only difference to me seems that people don’t seem to complain as much about hardening releases as they do security releases.

Anyway, I’m sure you know the drill by now. Make sure you take a backup beforehand (which you should be doing regularly anyway, and use the automatic upgrader or upgrade manually if necessary.

I just upgraded to 2.8.5 yesterday with the automatic upgrader and everything seems to be running smoothly.


Leland Fiegel was the original founder of ThemeLab. He is a web developer who loves WordPress and blogging.

  • Harsh Agrawal

    Saw this update Yesterday and the first thing which I did
    was Backyp my Db and updated the wordpress. Though wordpress are releasing very quick update.. :|

  • Cosmin

    I’ve ran into trouble when I updated my WordPress yesterday – today it kept returning an API related error almost everytime I tried to access a section of my admin.

    Therefore, I wrote a post as well on how to manually update WordPress. Indeed, it’s easier than most people think :)

  • Himanshu

    This is a nice release from WordPress. DDOS attack via trackback relief is nice.I am eagerly waiting for the new version WordPress 2.9. It will be interesting to see
    what will come out from the WordPress box to its users.

  • Keith

    Shouldn’t WordPress get it perfect first-time?