WordPress 3.9.2 Safety And Security Launch – San Francisco

WordPress 3.9.2 Safety And Security Launch – San Francisco

WordPress 3.9.2 is currently offered as a safety and security launch for all previous variations. We highly motivate you to upgrade your websites quickly.

This launch repairs a feasible rejection of solution concern in PHP’s XML handling, reported by Nir Goldshlager of the Salesforce.com Item Safety And Security Group. It was taken care of by Michael Adams and also Andrew Nacin of the WordPress protection group and also David Rothstein of theDrupal security team This is the very first time our 2 jobs have actually collaborated joint protection launches.

WordPress 3.9.2 likewise includes various other protection modifications:

  • Deals with a feasible however not likely code implementation when refining widgets (WordPress is not influenced by default), uncovered by Alex Concha of the WordPress protection group.
  • Stops details disclosure using XML entity strikes in the outside GetID3 collection, reported by Ivan Novikov of ONSec.
  • Includes securities versus brute strikes versus CSRF symbols, reported by David Tomaschik of the Google Safety And Security Group.
  • Consists of some extra protection solidifying, like avoiding cross-site scripting that might be activated just by managers.

We valued liable disclosure of these concerns straight to our protection group. For more details, see the release notes or seek advice from the list of changes.

Download WordPress 3.9.2 or endeavor over to Control Panel → Updates and also just click “Update Now”.

Websites that sustain automated history updates will certainly be upgraded to WordPress 3.9.2 within 12 hrs. (If you are still on WordPress 3.8.3 or 3.7.3, you will certainly likewise be upgraded to 3.8.4 or 3.7.4. We do not sustain older variations, so please upgrade to 3.9.2 for the most up to date and also biggest.)

Currently examining WordPress 4.0? The 3rd beta is now available (zip) and also it includes these protection repairs.


Cogknockers is a San Francisco WordPress Development Agency with 20+ Years Experience.  WordPress Design is at the core of our services.

Share this post

Share on facebook
Share on twitter
Share on linkedin
Share on pinterest
Share on print
Share on email

Recent News

0

Scroll to Top