WordPress 7.1.3 Fixes Pending Comment XSS and a WXR Export SQL Injection
WordPress 7.1.3 includes 7 security fixes and 4 bug fixes, including a stored XSS via pending comments and a second order SQL…
Browse
WordPress
-
Read more: WordPress 7.1.3 Fixes Pending Comment XSS and a WXR Export SQL Injection
-
WordPress 7.1.2 Patches an Unauthenticated Template Vulnerability
Read more: WordPress 7.1.2 Patches an Unauthenticated Template VulnerabilityWordPress 7.1.2 fixes a critical, unauthenticated template resolution vulnerability that can lead to remote code execution on any affected public site.
-
WordPress 7.1.1 Fixes Comment XSS Plus 36 Core and Editor Bugs
Read more: WordPress 7.1.1 Fixes Comment XSS Plus 36 Core and Editor BugsWordPress 7.1.1 includes 11 security fixes, among them a stored XSS through comments in wpautop(), and 36 bug fixes across core and…
-
WordPress 7.1: Responsive Styles, a New Media Editor and Richer Notes
Read more: WordPress 7.1: Responsive Styles, a New Media Editor and Richer NotesWordPress 7.1 adds responsive styles, a persistent admin bar, a new media editor, richer Notes and Playlist and Tabs blocks, plus a…
-
WordPress 7.0.4 Fixes an Imagick and Ghostscript Code Execution Risk
Read more: WordPress 7.0.4 Fixes an Imagick and Ghostscript Code Execution RiskWordPress 7.0.4 fixes an author level remote code execution issue on sites whose servers use Imagick and Ghostscript to process images and…
-
WordPress 7.0.3 Fixes a Login Screen XSS and 11 More Security Issues
Read more: WordPress 7.0.3 Fixes a Login Screen XSS and 11 More Security IssuesWordPress 7.0.3 fixes 12 security issues, including a login screen XSS reachable without an account and a multisite privilege escalation.
-
WordPress 7.0.2 Closes a SQL Injection and a REST API Code Execution Flaw
Read more: WordPress 7.0.2 Closes a SQL Injection and a REST API Code Execution FlawWordPress 7.0.2 fixes a facilitated SQL injection and a REST API batch route flaw leading to remote code execution, with forced auto…
-
WordPress 7.0.1 Fixes the Block Editor, Admin Screens and Media
Read more: WordPress 7.0.1 Fixes the Block Editor, Admin Screens and MediaWordPress 7.0.1 fixes 31 bugs in the block editor, admin interface and media library, following the large dashboard changes in WordPress 7.0.
-
WordPress 7.0: AI Built Into Core, a New Dashboard and PHP 7.4 Minimum
Read more: WordPress 7.0: AI Built Into Core, a New Dashboard and PHP 7.4 MinimumWordPress 7.0 builds AI into core, redesigns the dashboard, adds new blocks and design tools, and raises the minimum PHP version to…
-
WordPress 6.9.4 Completes the PclZip, Notes and getID3 Security Fixes
Read more: WordPress 6.9.4 Completes the PclZip, Notes and getID3 Security FixesWordPress 6.9.4 completes the PclZip, Notes and getID3 security fixes that were not fully applied in 6.9.2, so every site should end…
-
WordPress 6.9.3 Fixes the Blank Front End Bug After 6.9.2
Read more: WordPress 6.9.3 Fixes the Blank Front End Bug After 6.9.2WordPress 6.9.3 fixes a blank front end some sites saw after 6.9.2, caused by themes returning stringable objects instead of template file…
-
WordPress 6.9.2 Patches 10 Security Issues Including SSRF and XSS
Read more: WordPress 6.9.2 Patches 10 Security Issues Including SSRF and XSSWordPress 6.9.2 is a security release that fixes 10 issues, several involving logged in roles, the media library and admin screens.