WordPress 4.3.1 Security And Maintenance Update

The core WordPress team officially announced a security and maintenance release WordPress 4.3.1. This update fixes some important security issues, cross-site scripting (XSS) flaws and a potential privilege escalation.
 
 
WordPress 4.3.1
WordPress 4.3.1
WILMINGTON, Del. - Sept. 22, 2015 - PRLog -- WordPress - yes! this remarkable open-source content management system and robust blogging platform has received an update this week to a new security & maintenance version WordPress 4.3.1.

If you own a commercial website which is one out of the total 74,652,825 sites powered by WordPress, then surely this update is highly recommended to you. The added features and fixes of this latest release will surely compel you to upgrade your website with enhanced functionality.

This crucial update specifically addresses three issues which include two cross-site scripting vulnerabilities and one potential privilege escalation along with fixing patches for 26 bugs. The intuitive framework of this platform allows web developers to build customized WordPress websites and applications.

Here is the List of Changes which you can Expect from This Release

Evidently, this security release holds nothing significant other than fixing few vulnerabilities and bugs, which is important too. So, here are the major information regarding the main issues this release addresses:

1. The earlier WordPress versions including 4.3 are vulnerable to the cross-site scripting vulnerability while it processes shortcode tags (CVE-2015-5714). This issue was reported by Shahar Tal and Netanel Rubin of Check Point.

2. Ben Bidner of the WordPress core security team reported that a separate cross-site scripting vulnerability was found in the user list table.

3. And, in some reports, it was found that users could publish private posts and make them sticky without any official permission (CVE-2015-5715). This vulnerability was reported by Shahar Tal and Netanel Rubin of Check Point.

In addition to the security fixes, the WordPress 4.3.1 release fixes 26 bugs from the 4.3 branch.

You can download this latest WordPress update directly from your dashboard and the websites that support automatic background updates have already started to upgrade to WordPress 4.3.1.

For WordPress web development, visit - http://www.phpdevelopmentservices.com/wordpress-web-devel...

Contact
PHPDevelopmentServices
***@phpdevelopmentservices.com
End
Source: » Follow
Email:***@phpdevelopmentservices.com
Tags:Wordpress Update, WodPress
Industry:Internet
Location:Wilmington - Delaware - United States
Account Email Address Verified     Account Phone Number Verified     Disclaimer     Report Abuse



Like PRLog?
9K2K1K
Click to Share