{"id":12028404,"date":"2019-10-14T21:49:17","date_gmt":"2019-10-14T21:49:17","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=helphub_version&amp;p=12028404"},"modified":"2019-10-14T21:49:17","modified_gmt":"2019-10-14T21:49:17","slug":"version-5-2-4","status":"publish","type":"helphub_version","link":"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-2-4\/","title":{"rendered":"Version 5.2.4"},"content":{"rendered":"\n<p>On Oct. 14, 2019, WordPress 5.2.4 was released to the public. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Installation\/Update Information<\/h2>\n\n\n\n<p>To download WordPress 5.2.4, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit <a href=\"https:\/\/wordpress.org\/download\/release-archive\/\">https:\/\/wordpress.org\/download\/release-archive\/<\/a>. <\/p>\n\n\n\n<p>For step-by-step instructions on installing and updating WordPress:\n<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li> <a href=\"https:\/\/wordpress.org\/documentation\/article\/updating-wordpress\/\">Updating WordPress<\/a><\/li><\/ul>\n\n\n\n<p>If you are new to WordPress, we recommend that you begin with the following:\n<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li> <a href=\"\/support\/article\/new_to_wordpress_-_where_to_start\/\">New To WordPress &#8211; Where to Start<\/a><\/li><li> <a href=\"\/support\/article\/first-steps-with-wordpress\/\">First Steps With WordPress<\/a> or <a href=\"https:\/\/wordpress.org\/documentation\/article\/upgrading-wordpress-extended-instructions\/\">Upgrading WordPress Extended<\/a><\/li><li> <a href=\"\/support\/article\/wordpress-lessons\/\">WordPress Lessons<\/a><\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Summary<\/h2>\n\n\n\n<p>From the <a href=\"https:\/\/wordpress.org\/news\/2019\/10\/wordpress-5-2-4-security-release\/\">WordPress 5.2.4 release post<\/a>, WordPress versions 5.2 and earlier are affected by the following bugs, which are fixed in version 5.2.4. Updated versions of WordPress 5.1 and older releases since WordPress 3.7 are also available, for users who have not yet updated to 5.2.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Props to&nbsp;<a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/evanricafort.com\/\">Evan Ricafort<\/a>&nbsp;for finding an issue where stored XSS (cross-site scripting) could be added via the Customizer.<\/li><li>Props to&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/codesymphony.co\/\" target=\"_blank\">J.D. Grimes<\/a>&nbsp;who found and disclosed a method of viewing unauthenticated posts.<\/li><li>Props to&nbsp;<a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/weston.ruter.net\/\">Weston Ruter<\/a>&nbsp;for finding a way to create a stored XSS to inject Javascript into style tags.<\/li><li>Props to David Newman for highlighting a method to poison the cache of JSON GET requests via the Vary: Origin header.<\/li><li>Props to <a href=\"http:\/\/eugenekolo.com\/\">Eugene Kolodenker<\/a> who found a server-side request forgery in the way that URLs are validated.<\/li><li>Props to Ben Bidner of the WordPress Security Team who discovered issues related to referrer validation in the admin.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">List of Files Revised<\/h2>\n\n\n\n<pre class=\"wp-block-preformatted\">\/wp-includes\/class-wp.php\n \/wp-includes\/class-wp-query.php\n \/wp-includes\/functions.php\n \/wp-includes\/http.php\n \/wp-includes\/pluggable.php\n \/wp-includes\/rest-api.php <\/pre>\n","protected":false},"excerpt":{"rendered":"<p>On Oct. 14, 2019, WordPress 5.2.4 was released to the public. Installation\/Update Information To download WordPress 5.2.4, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit https:\/\/wordpress.org\/download\/release-archive\/. For step-by-step instructions on installing and updating WordPress: Updating WordPress If you are new to WordPress, we recommend that you begin with [&hellip;]<\/p>\n","protected":false},"featured_media":0,"menu_order":0,"template":"","helphub_major_release":[62],"class_list":["post-12028404","helphub_version","type-helphub_version","status-publish","hentry","helphub_major_release-5-2"],"revision_note":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/12028404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions"}],"about":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/types\/helphub_version"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/12028404\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/media?parent=12028404"}],"wp:term":[{"taxonomy":"helphub_major_release","embeddable":true,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/helphub_major_release?post=12028404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}