Monthly Archives: September 2015

WordPress 4.3.1 Security Release

WordPress Hosting

WordPress 4.3.1 is now available for download and upgrade.

This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress 4.3.1 addresses three issues, including two cross-site scripting vulnerabilities and a potential privilege escalation.

  • WordPress versions 4.3 and earlier are vulnerable to a cross-site scripting vulnerability when processing shortcode tags (CVE-2015-5714).
  • A separate cross-site scripting vulnerability was found in the user list table.
  • Finally, in certain cases, users without proper permissions could publish private posts and make them sticky (CVE-2015-5715).

WordPress 4.3.1 also fixes twenty-six bugs. For more information on all of the changes, see the release notes or consult the list of changes.

Download WordPress 4.3.1 or venture over to Dashboard ā†’ Updates and simply click ā€œUpdate Now.ā€ Sites that support automatic background updates are already beginning to update to WordPress 4.3.1.