WordPress 5.9.2 Security & Maintenance Release Fixes XSS and Prototype Pollution Vulnerabilities
In case you missed it, the WordPress core team released WordPress version 5.9.2 security & maintenance release yesterday, Thursday – March 10, 2022.
This security and maintenance release contains patches for a high-severity vulnerability and a couple of medium-severity issues. The high-severity vulnerability affects WordPress versions 5.9.0 and 5.9.1, allowing users with contributor-level access or higher to insert malicious JavaScript codes into WordPress posts. For the two medium-severity vulnerabilities, it impacts all WordPress versions prior to version 5.9.2 and could potentially allow malicious users or attackers to execute arbitrary JavaScript.
Below, you will see the different packages and files that have been revised or updated in this release.
List of updated packages in WordPress 5.9.2
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]
@wordpress/[email protected]List of Files Revised in WordPress 5.9.2
/wp-admin/about.php
/wp-includes/assets/script-loader-packages.php
/wp-includes/script-loader.php
/wp-includes/js/jquery/jquery.query.js
/wp-includes/kses.php
/wp-includes/version.phpWordPress 5.9.2 is a security and maintenance release, meaning that the next major release will be version 6.0.
If you have automatic background updates enabled on your WordPress-powered site, then you don’t have to do anything. For those of you who haven’t enabled automatic background updates or are not familiar with this feature, you can do so by logging in to your WordPress Dashboard > Updates and then clicking Update Now.
Again, kudos to the hardworking WordPress core team for addressing the security issues and releasing version 5.9.2.
Have you already upgraded your WordPress site to WordPress 5.9.2? If not, what are you waiting for? Do it already!
