| WordPress 4.7.3 Security release |
The Update includes security updates |
|---|
| Status: | WordPress 4.7.3 is available |
|---|
| Who should upgrade? | All users of WordPrss 4.7.2 and below |
|---|
| Download link | WordPress.org Home Page |
|---|
WordPress has released version 4.7.3. This is a SECURITY and maintenance release. This release addresses six main security issues (source):
- Cross-site scripting (XSS) via media file metadata.
- Control characters can trick redirect URL validation.
- Unintended files can be deleted by administrators using the plugin deletion functionality.
- Cross-site scripting (XSS) via video URL in YouTube embeds.
- Cross-site scripting (XSS) via taxonomy term names.
- Cross-site request forgery (CSRF) in Press This leading to excessive use of server resources.
For more specific information concerning the security fixes, please go to Wordpress 4.7.3 Security Release page.
We value your feedback!
There is a step or detail missing from the instructions.
The information is incorrect or out-of-date.
It does not resolve the question/problem I have.
new! - Enter your name and email address above and we will post your feedback in the comments on this page!