WordPress 5.4.1 Released

WordPress 5.4.1 is Out

This new version of WordPress is a security and maintenance release and we suggest all WordPress website owners do this upgrade.

WordPress 5.4.1 Release (wordpress.org)

This security and maintenance release features 17 fixes and 7 security fixes

Security updates

Seven security issues affect WordPress versions 5.4 and earlier. If you haven’t yet updated to 5.4, all WordPress versions since 3.7 have also been updated to fix the following security issues:

• Props to Muaz Bin Abdus Sattar and Jannes who both independently reported an issue where password reset tokens were not properly invalidated
• Props to ka1n4t for finding an issue where certain private posts can be viewed unauthenticated
• Props to Evan Ricafort for discovering an XSS issue in the Customizer
• Props to Ben Bidner from the WordPress Security Team who discovered an XSS issue in the search block
• Props to Nick Daugherty from WordPress VIP / WordPress Security Team who discovered an XSS issue in wp-object-cache
• Props to Ronnie Goodrich (Kahoots) and Jason Medeiros who independently reported an XSS issue in file uploads.
• Props to Weston Ruter for fixing a stored XSS vulnerability in the WordPress customizer.
• Additionally, an authenticated XSS issue in the block editor was discovered by Nguyen the Duc in WordPress 5.4 RC1 and RC2. It was fixed in 5.4 RC5. We wanted to be sure to give credit and thank them for all of their work in making WordPress more secure.

More About the Upgrade…

The previous version of WordPress was 5.4 on April 1, 2020.

Our Website Maintenance Department will be in contact with you regarding these upgrades. Clients that have signed up for our Automatic WordPress Update Program or Website Care program will get their website updated in the next week or so or if a follow-up version of WordPress is released.

View the complete list of WordPress versions here and here.

Read more about why WordPress updates are important.

What is Website Care?

If you haven’t heard about our Website Care, then you’re missing out on savings and peace of mind!

There are different levels to choose from but with each level, you get your installation of WordPress checked weekly for updates to the core software, plugins and themes. The benefit is that your website software is kept up to date. This work is done by hand and we test your website after the upgrade to make sure everything works like it should.

The program is either by monthly subscription or you can save 10% and pay for a year in advance. When you use this program you save about 40% on updating WordPress. It’s kind of a no-brainer!

Sleep better knowing that your website is being taken care of when you enroll in our Website Care today!

-Webstix Support