{"id":13598601,"date":"2020-10-29T21:11:41","date_gmt":"2020-10-29T21:11:41","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=helphub_version&amp;p=13598601"},"modified":"2020-10-29T21:11:41","modified_gmt":"2020-10-29T21:11:41","slug":"version-4-9-16","status":"publish","type":"helphub_version","link":"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-4-9-16\/","title":{"rendered":"Version 4.9.16"},"content":{"rendered":"\n<p>On October 29, 2020, WordPress 4.9.16 was released to the public.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Installation\/Update Information<\/h2>\n\n\n\n<p>To download this version, update automatically from the Dashboard &gt; Updates menu in your site\u2019s admin area or visit <a href=\"https:\/\/wordpress.org\/download\/release-archive\/\">WordPress releases archive<\/a>.<\/p>\n\n\n\n<p>For step-by-step instructions on installing and updating WordPress:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/wordpress.org\/documentation\/article\/updating-wordpress\/\">Updating WordPress<\/a><\/li><\/ul>\n\n\n\n<p>If you are new to WordPress, we recommend that you begin with the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/wordpress.org\/documentation\/article\/new_to_wordpress_-_where_to_start\/\">New To WordPress \u2013 Where to Start<\/a><\/li><li><a href=\"https:\/\/wordpress.org\/documentation\/article\/first-steps-with-wordpress\/\">First Steps With WordPress<\/a>&nbsp;or&nbsp;<a href=\"https:\/\/wordpress.org\/documentation\/article\/upgrading-wordpress-extended-instructions\/\">Upgrading WordPress Extended<\/a><\/li><li><a href=\"https:\/\/wordpress.org\/documentation\/article\/wordpress-lessons\/\">WordPress Lessons<\/a><\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Summary<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Security updates<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Props to Alex Concha of the WordPress Security Team for their work in hardening deserialization requests.<\/li><li>Props to David Binovec on a fix to disable spam embeds from disabled sites on a multisite network.<\/li><li>Thanks to Marc Montas from Sucuri for reporting an issue that could lead to XSS from global variables.<\/li><li>Thanks to Justin Tran who reported an issue surrounding privilege escalation in XML-RPC. He also found and disclosed an issue around privilege escalation around post commenting via XML-RPC.<\/li><li>Props to Omar Ganiev who reported a method where a DoS attack could lead to RCE.<\/li><li>Thanks to Karim El Ouerghemmi from&nbsp;<a href=\"https:\/\/www.ripstech.com\/\">RIPS<\/a>&nbsp;who disclosed a method to store XSS in post slugs.<\/li><li>Thanks to Slavco for reporting, and confirmation from Karim El Ouerghemmi, a method to bypass protected meta that could lead to arbitrary file deletion.<\/li><li>And a special thanks to @zieladam who was integral in many of the releases and patches during this release.<\/li><\/ul>\n\n\n\n<p>This release was led by&nbsp;<a href=\"https:\/\/profiles.wordpress.org\/audrasjb\/\">@audrasjb<\/a>,&nbsp;<a href=\"https:\/\/profiles.wordpress.org\/davidbaumwald\/\">@davidbaumwald<\/a>,&nbsp;<a href=\"https:\/\/profiles.wordpress.org\/desrosj\/\">@desrosj<\/a>,&nbsp;<a href=\"https:\/\/profiles.wordpress.org\/johnbillion\/\">@johnbillion<\/a>, <a href=\"https:\/\/profile.wordpress.org\/metalandcoffee\">@metalandcoffee<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/noisysocks\/\">@noisysocks<\/a>&nbsp;<a href=\"https:\/\/profiles.wordpress.org\/planningwrite\/\">@planningwrite<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/sarahricker\/\">@sarahricker<\/a>,&nbsp;<a href=\"https:\/\/profiles.wordpress.org\/sergeybiryukov\/\">@sergeybiryukov<\/a>&nbsp;and&nbsp;<a href=\"https:\/\/profiles.wordpress.org\/whyisjake\/\">@whyisjake<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On October 29, 2020, WordPress 4.9.16 was released to the public. Installation\/Update Information To download this version, update automatically from the Dashboard &gt; Updates menu in your site\u2019s admin area or visit WordPress releases archive. For step-by-step instructions on installing and updating WordPress: Updating WordPress If you are new to WordPress, we recommend that you [&hellip;]<\/p>\n","protected":false},"featured_media":0,"menu_order":0,"template":"","helphub_major_release":[46],"class_list":["post-13598601","helphub_version","type-helphub_version","status-publish","hentry","helphub_major_release-4_9"],"revision_note":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/13598601","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions"}],"about":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/types\/helphub_version"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/13598601\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/media?parent=13598601"}],"wp:term":[{"taxonomy":"helphub_major_release","embeddable":true,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/helphub_major_release?post=13598601"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}