After nearly 7 million downloads of WordPress 3.6, we delight in to reveal the accessibility of variation 3.6.1. This upkeep launch fixes 13 bugs in variation 3.6, which was an extremely smooth launch.
WordPress 3.6.1 is additionally a safety and security launch for all previous WordPress variations and also we highly urge you to upgrade your websites instantly. It resolves 3 problems repaired by the WordPress safety group:
- Block risky PHP unserialization that might happen in minimal circumstances and also configurations, which can bring about remote code implementation. Reported by Tom Van Goethem.
- Protect against a customer with a Writer function, making use of a specifically crafted demand, from having the ability to produce an article “composed by” an additional individual. Reported by Anakorn Kyavatanakij.
- Take care of inadequate input recognition that might lead to rerouting or leading a customer to an additional site. Reported by Dave Cummo, a Northrup Grumman subcontractor for the U.S. Centers for Disease Control and Prevention.
Furthermore, we have actually readjusted safety limitations around data publishes to minimize the possibility for cross-site scripting.
Download WordPress 3.6.1 or upgrade currently from the Control panel → Updates food selection in your website’s admin location.