{"id":11253335,"date":"2019-05-19T06:50:53","date_gmt":"2019-05-19T06:50:53","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=helphub_version&amp;p=11253335"},"modified":"2019-05-19T06:50:53","modified_gmt":"2019-05-19T06:50:53","slug":"version-3-5-2","status":"publish","type":"helphub_version","link":"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-3-5-2\/","title":{"rendered":"Version 3.5.2"},"content":{"rendered":"\n<p>On June 21, 2013, WordPress 3.5.2 was released to the public. This is a maintenance and security update.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Installation\/Update Information<\/h2>\n\n\n\n<p>To download WordPress 3.5.2, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit&nbsp;<a href=\"https:\/\/wordpress.org\/download\/release-archive\/\">https:\/\/wordpress.org\/download\/release-archive\/<\/a>.<\/p>\n\n\n\n<p>For step-by-step instructions on installing and updating WordPress:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/wordpress.org\/documentation\/article\/updating-wordpress\/\">Updating WordPress<\/a><\/li><\/ul>\n\n\n\n<p>If you are new to WordPress, we recommend that you begin with the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/wordpress.org\/documentation\/article\/new_to_wordpress_-_where_to_start\/\">New To WordPress \u2013 Where to Start<\/a><\/li><li><a href=\"https:\/\/wordpress.org\/documentation\/article\/first-steps-with-wordpress\/\">First Steps With WordPress<\/a>&nbsp;or&nbsp;<a href=\"https:\/\/wordpress.org\/documentation\/article\/upgrading-wordpress-extended-instructions\/\">Upgrading WordPress Extended<\/a><\/li><li><a href=\"https:\/\/wordpress.org\/documentation\/article\/wordpress-lessons\/\">WordPress Lessons<\/a><\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Summary<\/h2>\n\n\n\n<p>From the&nbsp;<a href=\"https:\/\/wordpress.org\/news\/2013\/06\/wordpress-3-5-2\/\">announcement post<\/a>, this maintenance release addresses 12 bugs with version 3.5 and 3.5.1.<\/p>\n\n\n\n<p>Additionally: Version 3.5.2 fixes seven security issues:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">* Server-Side Request Forgery (SSRF) via the HTTP API. CVE-2013-2199.\n* Privilege Escalation: Contributors can publish posts, and users can reassign authorship. CVE-2013-2200.\n* Cross-Site Scripting (XSS) in SWFUpload. CVE-2013-2205.\n* Denial of Service (DoS) via Post Password Cookies. CVE-2013-2173.\n* Content Spoofing via Flash Applet in TinyMCE Media Plugin. CVE-2013-2204.\n* Cross-Site Scripting (XSS) when Uploading Media. CVE-2013-2201.\n* Full Path Disclosure (FPD) during File Upload. CVE-2013-2203.\n<\/pre>\n\n\n\n<p>Additional security hardening includes:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">* Cross-Site Scripting (XSS) (Low Severity) when Editing Media. CVE-2013-2201.\n* Cross-Site Scripting (XSS) (Low Severity) when Installing\/Updating Plugins\/Themes. CVE-2013-2201.\n* XML External Entity Injection (XXE) via oEmbed. CVE-2013-2202.\n<\/pre>\n\n\n\n<p>A full log of the changes made for 3.5.2 can be found at&nbsp;<a href=\"https:\/\/core.trac.wordpress.org\/log\/branches\/3.5?rev=24498&amp;stop_rev=23347\">https:\/\/core.trac.wordpress.org\/log\/branches\/3.5?rev=24498&amp;stop_rev=23347<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">List of Files Revised<\/h2>\n\n\n\n<pre class=\"wp-block-preformatted\">readme.html\nwp-admin\/includes\/media.php\nwp-admin\/includes\/class-wp-importer.php\nwp-admin\/includes\/file.php\nwp-admin\/includes\/post.php\nwp-admin\/includes\/upgrade.php\nwp-admin\/includes\/schema.php\nwp-admin\/includes\/class-wp-upgrader.php\nwp-admin\/includes\/update-core.php\nwp-admin\/update.php\nwp-admin\/about.php\nwp-admin\/edit-form-advanced.php\nwp-login.php\nwp-includes\/class-wp-xmlrpc-server.php\nwp-includes\/rss.php\nwp-includes\/functions.php\nwp-includes\/formatting.php\nwp-includes\/post.php\nwp-includes\/media-template.php\nwp-includes\/deprecated.php\nwp-includes\/wp-db.php\nwp-includes\/user.php\nwp-includes\/class-wp-admin-bar.php\nwp-includes\/version.php\nwp-includes\/class-phpass.php\nwp-includes\/comment.php\nwp-includes\/pluggable.php\nwp-includes\/class-feed.php\nwp-includes\/script-loader.php\nwp-includes\/class-http.php\nwp-includes\/js\/media-editor.min.js\nwp-includes\/js\/swfupload\/swfupload-all.js\nwp-includes\/js\/swfupload\/handlers.js\nwp-includes\/js\/swfupload\/handlers.min.js\nwp-includes\/js\/swfupload\/swfupload.swf\nwp-includes\/js\/plupload\/handlers.js\nwp-includes\/js\/plupload\/handlers.min.js\nwp-includes\/js\/tinymce\/wp-tinymce.js.gz\nwp-includes\/js\/tinymce\/plugins\/media\/moxieplayer.swf\nwp-includes\/js\/tinymce\/tiny_mce.js\nwp-includes\/js\/media-editor.js\nwp-includes\/class-oembed.php\nwp-includes\/post-template.php\nwp-includes\/http.php<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>On June 21, 2013, WordPress 3.5.2 was released to the public. This is a maintenance and security update. Installation\/Update Information To download WordPress 3.5.2, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit&nbsp;https:\/\/wordpress.org\/download\/release-archive\/. For step-by-step instructions on installing and updating WordPress: Updating WordPress If you are new to WordPress, [&hellip;]<\/p>\n","protected":false},"featured_media":0,"menu_order":0,"template":"","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false},"helphub_major_release":[],"class_list":["post-11253335","helphub_version","type-helphub_version","status-publish","hentry"],"revision_note":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/11253335","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions"}],"about":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/types\/helphub_version"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/11253335\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/media?parent=11253335"}],"wp:term":[{"taxonomy":"helphub_major_release","embeddable":true,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/helphub_major_release?post=11253335"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}