WordPress Releases version four.1.2, Calls It A “critical safety unencumber”

WordPress has pushed out model four.1.2 of its content administration software, calling it a “crucial security release” and advising all users to upgrade right away.

“WordPress versions four.1.1 and past are suffering from a essential cross-website scripting vulnerability, which may permit anonymous customers to compromise a web site,” said Gary Pendergast, a member of the WordPress safety staff, in a firm weblog submit lately.

This update also fixes three additional safety concerns, WordPress says:

• In WordPress 4.1 and better, files with invalid or unsafe names can be uploaded.
• In WordPress three.9 and higher, an extraordinarily restricted go-site scripting vulnerability can be used as a part of a social engineering attack.
• Some plugins had been prone to an SQL injection vulnerability.

WordPress customers can replace their web sites by the use of the website online dashboard or by downloading WordPress 4.1.2. Many internet hosts provide automatic WordPress updates and those are already underway.

about the writer

Matt McGee

Matt McGee is the Editor-In-Chief of Search Engine Land. His information occupation contains time spent in tv, radio, and print journalism. After leaving traditional media in the mid-Nineteen Nineties, he commenced creating and advertising and marketing web pages and continued to offer consulting services for more than 15 years. His website positioning and social media shoppers ranged from mom-and-pop small businesses to one of the vital top 5 on-line outlets. Matt is a longtime speaker at advertising events around the U.S., together with keynote and panelist roles. He may also be found on Twitter at @MattMcGee and/or on Google Plus. which you could learn Matt’s disclosures on his non-public weblog. which you could reach Matt by way of electronic mail using our Contact web page.

(Some images used beneath license from Shutterstock.com.)