bbPress 2.5.9 is out, and is a security release for all previous 2.x versions.
bbPress versions 2.5.8 and earlier are susceptible to a form of cross-site-scripting, due to the way users are linked to their profiles when they are mentioned in topics and replies.
Check the 2.5 milestone for a comprehensive changelog of fixes.
Take a moment to update your bbPress installations to 2.5.9. If you’re using WordPress’s built-in updater, it should only take a click or two.
These fixes have also been ported over to 2.6, which we continue to run here at bbPress.org and BuddyPress.org.
Just a reminder. The WP dev chat time was changed as and a result we have updated ours as well. The bbPress weekly dev chat will now be (back) at 21:00 UTC (4pm central).
bbPress 2.3 release is imminent. Last chance to sneak anything in!
bbPress 2.3 RC1 has now been released 🙂
You can check out the finer details from @JohnJamesJacoby on the bbPress blog here.
It would be great if you could:
- Test all the things…
- Test your themes…
- Test your plugins…
- Test your site…
If you find a bug please post a ticket http://bbpress.trac.wordpress.org/
Updated bbPress.org to latest trunk, which includes some tweaks to posting code, and some preliminary forum searching abilities (courtesy of jmdodd.)
I’ll be tweaking the site templates and CSS to make it fit the site more appropriately.
We’re going to be taking a break from our weekly dev chats for a few weeks to enjoy the holidays. We’ll pick up things again on Wednesday January 2nd, 2013.
The new search feature (#1575) is in trunk so feel free to have some fun with that. Hope everyone has a great Festivus 😉