今天WordPress 3.3.2正式版本已经可以看到更新版本，但目前没中文版本，应该也不久会有。刚刚发布的3.3.2版本，有一个安全更新，解决了一些以前版本中发现的安全漏洞。根据官方公告，三个外部库获得安全更新：Plupload，SWFUpload和SWFObject。上述漏洞由 Neal Poole、 Partlan和Szymon Gruszecki三人披露。 WordPress的3.3.2还解决了由该组织的核心安全团队确定的一些其他问题：plupload（版本1.5.4），WordPress的上传媒体使用。 SWFUpload，WordPress的先前用于上传媒体，仍可能在插件中使用。 SWFObject，WordPress的先前用于嵌入Flash内容，并仍可能在插件和主题中使用。WordPress 3.3.2也更新了： 网站管理员可以停用网络范围内的插件时，在特定情况下运行，是一个WordPress网络特权升级。 点击网址时的跨站点脚本漏洞。 当在旧版本的浏览器中进行评论和过滤网址后重定向跨站点脚本漏洞。下载:WordPress 3.32
WordPress 3.3.1 现已发布。本维护版本修复了 3.3 版本的 15 处问题，另外还有一个影响了 3.3 的跨站脚本攻击漏洞。感谢 Joshua H.、Hoang T.、Stefan Zimmerman、Chris K. 和 Go Daddy 安全小组向我们的安全团队上报该问题。下载 3.3.1，或通过您站点后台的“仪表盘” → “更新”来升级。下载:WordPress 3.3.1
最新最棒的 WordPress 版本 —— 3.3 版本现已推出！本版本代号“Sonny”，献给伟大的爵士萨克斯手 Sonny Stitt 先生。您现在就可以在控制板升级啦！哦对了，差点忘了告诉您，从这个版本开始，中文版本将更强大的控制板（dashboard）改称为“仪表盘”了。自 3.0 版本以来，WordPress 已经有了六万五千余次下载了。作为第三次对 3 系列的修订，本版本主要显著提升了您的使用体验：导航菜单、上传机制，以及导入以往备份等等。 面向用户有经验的用户一定会喜欢全新的“拖放上传工具”、鼠标悬浮式导航菜单、一体化工具栏、增强的合作编辑体验、以及 Tumblr 导入工具。我们也关注新用户的体验。3.3 版本新增了“气泡提示”功能，在每次更新后，在功能上大幅度的改动会主动弹出提醒用户。同时，使用 3.3 版本新安装 WordPress 的用户会看到一个非常友好的消息框，提示如何开始使用 WordPress。每个页面上的“帮助”选项卡也有显著改进，实用性得到极大提升。站点的“仪表盘”也更加兼容 iPad 和其它平板电脑了。中文版本方面本次新加入了中文字数统计功能，在您写文章时会自动统计中文字数和英文词数之和。面向开发者 开发者应该会喜欢新的编辑器 API、最新的 jQuery 版本、更易用的帮助钩子，和更高的固定的链接性能。更多改进，请参见 Codex 文档（英文，正在翻译）和 Trac（英文）。英文版下载地址：http://wordpress.org/wordpress-3.3.zip 中文包下载地址：http://cn.wordpress.org/wordpress-3.3-zh_CN.zip
Release Candidate stage means we think we’re done and are about ready to launch this version, but are doing one last check before we officially call it. So take a look, and as always, please check your themes and plugins for compatibility if you’re a developer.Stayed up late tonight, Hammering toward RC1. Now with more icons!Download WordPress 3.3 Release Candidate 1.
The march toward 3.3 continues!With all our major tickets closed, we are very close to a release candidate. In Beta 4 we’ve fixed a bunch of bugs, cleaned up the UI, added real text in some of the screens that still had placeholder text in Beta 3 (post-update screen, the Dashboard welcome area, new feature pointers), and generally tightened things up. We updated to jQuery 1.7.1 and addressed a LOT of bugs.If you are a plugin or theme developer (or distributor), please test against Beta 4 to ensure there are no issues.If you find any problems, please report them as usual. Many thanks!Thought 3 was the last? Ha ha! Beta 4 is here – Better get testing!Download WordPress 3.3 Beta 4
Testers, Beta 3 is now available! You know the drill: use a test install, see what you can break, and report any bugs you find. There have been 200 commits since Beta 2, but at this point, betas are not adding new features — it's all about fixing bugs, making things a little prettier, and editing text strings.As always, plugin and theme authors, PLEASE test your code against the beta so you can catch any incompatibilities now rather than after your users update their WordPress installation and find bugs for you.This time we really mean it, especially if your plugin uses jQuery . We've now updated to jQuery 1.7 in core, so please please pretty please check your plugins and themes against beta 3.These silly haikus – With so many releases, I run out of words.Download WordPress 3.3 Beta 3 now.
Changes since Beta 1: Updated the Blue theme Fixed IE7 and RTL support Improved flyout menu styling and fixed several glitches Finished the Pointers implementation Landed the dashboard Welcome box for new installs Improved contextual help styling Tweaked the admin bar a little more Fixed a bunch of bugs Consult the full change log for details, and see the Beta 1 announcement for information on how to help test Beta 2.Welcome for the new – 3.3 at beta 2. (IE7, woo!)Download 3.3 Beta 2.
WordPress 3.3 is ready for beta testers.As always, this is software still in development and we don’t recommend that you run it on a production site — set up a test site just to play with the new version. If you break it (find a bug), please report it, and if you’re a developer, try to help us fix it.If all goes well, we hope to release WordPress 3.3 by the end of November. The more help we get with testing and fixing bugs, the sooner we will be able to release the final version. If you want to be a beta tester, you should check out the Codex article on how to report bugs. Here’s some of what’s new: Media uploader Improved admin bar Fly out admin menus Remember, if you find something you think is a bug, report it! You can bring it up in the alpha/beta forum, you can email it to the wp-testers list, or if you’ve confirmed that other people are experiencing the same bug, you can report it on the WordPress Core Trac. (We recommend starting in the forum or on the mailing list.)Theme and plugin authors, if you haven’t been following the 3.3 development cycle, please start now so that you can update your themes and plugins to be compatible with the newest version of WordPress.Download WordPress 3.3 Beta 1And now, haiku.Features almost done…3.3 at Beta 1.Test it now — have fun!
WordPress脚本严重漏洞被曝光 可被外部写入文件
数十万WordPress用户目前似乎正遭受图像处理脚本Timthumb的威胁，这是一个相当受欢迎的第三方脚本，它可以实现动态图像裁剪、缩放和调整，脚本的文件名是timthumb.php，该文档定义了数个可以远程提取的相册，但脚本并没有很好地验证这些域名，因此类似“http://flickr.com.maliciousdomain.com”这样的欺骗性二三级域名也会被通过，所以黑客理论上可以用任何域名后缀轻松仿冒，并通过缓存目录上传各种恶意程序。目前在Google搜索这一脚本的文件名，一共返回了39万个结果，这意味着这些博客全部遭受安全漏洞的影响，所以如果您运行着WordPress和Timthumb，请尽快做出行动修补或者暂停运行。
WordPress在美国独立日发布了3.2正式版，这是3.1版本发布一个月，下载量突破1500万后的又一个主要版本，新版带来了更快的速度和更轻量级的代码，并带来了HTML5构建的Twenty Eleven主题，在写文章的同时还可以以全屏方式进行。 具体更新可见视频：下载: http://wordpress.org/wordpress-3.2.zip