{"id":12752927,"date":"2020-04-29T16:57:41","date_gmt":"2020-04-29T16:57:41","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=helphub_version&amp;p=12752927"},"modified":"2020-04-29T16:57:41","modified_gmt":"2020-04-29T16:57:41","slug":"version-5-0-9","status":"publish","type":"helphub_version","link":"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-0-9\/","title":{"rendered":"Version 5.0.9"},"content":{"rendered":"\n<p>On April 29, 2020, WordPress 5.0.9 was released to the public. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Installation\/Update Information<\/h2>\n\n\n\n<p>To download WordPress 5.0.9, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit <a href=\"https:\/\/wordpress.org\/download\/release-archive\/\">https:\/\/wordpress.org\/download\/release-archive\/<\/a>. <\/p>\n\n\n\n<p>For step-by-step instructions on installing and updating WordPress:\n<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li> <a href=\"https:\/\/wordpress.org\/documentation\/article\/updating-wordpress\/\">Updating WordPress<\/a><\/li><\/ul>\n\n\n\n<p>If you are new to WordPress, we recommend that you begin with the following:\n<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li> <a href=\"\/support\/article\/new_to_wordpress_-_where_to_start\/\">New To WordPress &#8211; Where to Start<\/a><\/li><li> <a href=\"\/support\/article\/first-steps-with-wordpress\/\">First Steps With WordPress<\/a> or <a href=\"https:\/\/wordpress.org\/documentation\/article\/upgrading-wordpress-extended-instructions\/\">Upgrading WordPress Extended<\/a><\/li><li> <a href=\"\/support\/article\/wordpress-lessons\/\">WordPress Lessons<\/a><\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Summary<\/h2>\n\n\n\n<p>Six security issues affect WordPress versions 5.4 and earlier; version 5.4.1 fixes them, so you\u2019ll want to upgrade. If you haven\u2019t yet updated to 5.4, there are also updated versions of 5.3 and earlier that fix the security issues.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Props to&nbsp;<a href=\"https:\/\/hackerone.com\/hijibiji\">Muaz Bin Abdus Sattar<\/a>&nbsp;and&nbsp;<a href=\"https:\/\/hackerone.com\/dyennez\">Jannes<\/a>&nbsp;who both independently reported an issue where password reset tokens were not properly invalidated<\/li><li>Props to&nbsp;<a href=\"https:\/\/github.com\/ka1n4t\">ka1n4t<\/a>&nbsp;for finding an issue where certain private posts can be viewed unauthenticated<\/li><li>Props to&nbsp;<a href=\"https:\/\/evanricafort.com\/\">Evan Ricafort<\/a>&nbsp;for discovering an XSS issue in the Customizer<\/li><li>Props to Ben Bidner from the WordPress Security Team who discovered an XSS issue in the search block<\/li><li>Props to Nick Daugherty from WPVIP.com \/ WordPress Security Team who discovered an XSS issue in wp-object-cache<\/li><li>Props to Ronnie Goodrich (<a href=\"https:\/\/hackerone.com\/kahoots\">Kahoots<\/a>) and&nbsp;<a href=\"http:\/\/pentestusa.com\/\">Jason Medeiros<\/a>&nbsp;who independently reported an XSS issue in file uploads.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">List of Files Revised<\/h2>\n\n\n\n<pre class=\"wp-block-preformatted\">\/wp-includes\/cache.php\n\/wp-includes\/class-wp-customize-manager.php\n\/wp-includes\/class-wp-query.php\n\/wp-includes\/formatting.php\n\/wp-includes\/post.php\n\/wp-includes\/user.php<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>On April 29, 2020, WordPress 5.0.9 was released to the public. Installation\/Update Information To download WordPress 5.0.9, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit https:\/\/wordpress.org\/download\/release-archive\/. For step-by-step instructions on installing and updating WordPress: Updating WordPress If you are new to WordPress, we recommend that you begin with [&hellip;]<\/p>\n","protected":false},"featured_media":0,"menu_order":0,"template":"","helphub_major_release":[48],"class_list":["post-12752927","helphub_version","type-helphub_version","status-publish","hentry","helphub_major_release-5_0"],"revision_note":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/12752927","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions"}],"about":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/types\/helphub_version"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/12752927\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/media?parent=12752927"}],"wp:term":[{"taxonomy":"helphub_major_release","embeddable":true,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/helphub_major_release?post=12752927"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}