WordPress 3.9.2 Security Release

WordPress announced yesterday that 3.9.2 has been released, this is a security update and it is recommended that if you are not hosting with a web host that offers automatic updates then you should update this yourself as soon as possible.

This update fixes a possible denial of service issue in PHP’s XML processing.

WordPress 3.9.2 also contains other security changes:

  • Fixes a possible but unlikely code execution when processing widgets (WordPress is not affected by default).
  • Prevents information disclosure via XML entity attacks in the external GetID3 library.
  • Adds protections against brute attacks against CSRF tokens.
  • Contains some additional security hardening, like preventing cross-site scripting that could be triggered only by administrators.

You can update directly from your admin panel.

WordPress also announced that this is the first security release that their security team and the Drupal security team have worked on jointly.

WordPress 4.0 Beta3 has also just been released so it looks like we might be getting the stable version within the next month or so.

Image by Kevin Phillips from Pixabay

Oh hi there 👋 It’s nice to meet you.

Sign up to get access to all the sites that I have used to make money online.

We don’t spam! Read our privacy policy for more info.

About Dean Saliba

Dean Saliba is a freelance writer, professional blogger, media enthusiast, keen long-distance runner, and huge professional wrestling fan, who covers a wide range of subjects and niches including: making money online, traffic generating, pro wrestling, blog reviews, football, how-to guides, music, internet marketing, running, and more.

Check Also

How to Change your WordPress Permalink Structure

When you install WordPress you will no doubt notice that the default permalink structure is …