{"id":4041,"date":"2016-01-06T20:07:41","date_gmt":"2016-01-06T20:07:41","guid":{"rendered":"https:\/\/wordpress.org\/news\/?p=4041"},"modified":"2022-11-18T22:53:52","modified_gmt":"2022-11-18T22:53:52","slug":"wordpress-4-4-1-security-and-maintenance-release","status":"publish","type":"post","link":"https:\/\/wordpress.org\/news\/2016\/01\/wordpress-4-4-1-security-and-maintenance-release\/","title":{"rendered":"WordPress 4.4.1 Security and Maintenance Release"},"content":{"rendered":"<p>WordPress 4.4.1 is now available. This is a <strong>security release<\/strong> for all previous versions and we strongly encourage you to update your sites immediately.<\/p>\n<p>WordPress versions 4.4 and earlier are affected by a cross-site scripting vulnerability that could allow a site\u00a0to be compromised. This was <a href=\"https:\/\/make.wordpress.org\/core\/handbook\/reporting-security-vulnerabilities\/\">reported<\/a> by\u00a0<a href=\"https:\/\/hackerone.com\/crtc4l\">Crtc4L<\/a>.<\/p>\n<p>There were also several non-security bug fixes:<\/p>\n<ul>\n<li>Emoji support has been updated to include all of the latest emoji characters, including the new diverse emoji! \ud83d\udc4d\ud83c\udfff\ud83d\udc4c\ud83c\udffd\ud83d\udc4f\ud83c\udffc<\/li>\n<li>Some sites with older versions of OpenSSL installed were unable to communicate with other services provided through some plugins.<\/li>\n<li>If a post URL was ever re-used, the site could redirect to the wrong post.<\/li>\n<\/ul>\n<p>WordPress 4.4.1 fixes 52 bugs from 4.4. For more information, see the <a href=\"https:\/\/codex.wordpress.org\/Version_4.4.1\">release notes<\/a>\u00a0or consult the <a href=\"https:\/\/core.trac.wordpress.org\/query?milestone=4.4.1\">list of changes<\/a>.<\/p>\n<p><a href=\"https:\/\/wordpress.org\/download\/\">Download WordPress 4.4.1<\/a>\u00a0or venture over to Dashboard \u2192 Updates and simply click \u201cUpdate Now.\u201d Sites that support automatic background updates are already beginning to update to WordPress 4.4.1.<\/p>\n<p>Thanks to everyone who contributed to 4.4.1:<\/p>\n<p><a href=\"https:\/\/profiles.wordpress.org\/aaroncampbell\/\">Aaron D. Campbell<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/jorbin\/\">Aaron Jorbin<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/afercia\/\">Andrea Fercia<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/nacin\/\">Andrew Nacin<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/azaozz\/\">Andrew Ozz<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/boonebgorges\/\">Boone Gorges<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/Compute\/\">Compute<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/redsweater\/\">Daniel Jalkut (Red Sweater)<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/DvanKooten\/\">Danny van Kooten<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/dd32\/\">Dion Hulse<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/ocean90\/\">Dominik Schilling (ocean90)<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/dossy\/\">Dossy Shiobara<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/eherman24\/\">Evan Herman<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/pento\/\">Gary Pendergast<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/gblsm\/\">gblsm<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/hnle\/\">Hinaloe<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/igmoweb\/\">Ignacio Cruz Moreno<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/jadpm\/\">jadpm<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/jeffpyebrookcom\/\">Jeff Pye Brook<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/joemcgill\/\">Joe McGill<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/johnbillion\/\">John Blackbourn<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/JPr\/\">jpr<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/obenland\/\">Konstantin Obenland<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/KrissieV\/\">KrissieV<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/tyxla\/\">Marin Atanasov<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/wp-architect\/\">Matthew Ell<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/meitar\/\">Meitar<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/swissspidy\/\">Pascal Birchler<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/peterwilsoncc\/\">Peter Wilson<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/rogerhub\/\">Roger Chen<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/rmccue\/\">Ryan McCue<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/salcode\/\">Sal Ferrarello<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/wonderboymusic\/\">Scott Taylor<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/scottbrownconsulting\/\">scottbrownconsulting<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/SergeyBiryukov\/\">Sergey Biryukov<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/ShinichiN\/\">Shinichi Nishikawa<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/smerriman\/\">smerriman<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/netweb\/\">Stephen Edgar<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/stephenharris\/\">Stephen Harris<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/tharsheblows\/\">tharsheblows<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/voldemortensen\/\">voldemortensen<\/a>, and <a href=\"https:\/\/profiles.wordpress.org\/webaware\/\">webaware<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>WordPress 4.4.1 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.4 and earlier are affected by a cross-site scripting vulnerability that could allow a site\u00a0to be compromised. This was reported by\u00a0Crtc4L. There were also several non-security bug fixes: Emoji [&hellip;]<\/p>\n","protected":false},"author":2738372,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"episode_type":"","audio_file":"","cover_image":"","cover_image_id":"","duration":"","filesize":"","date_recorded":"","explicit":"","block":"","filesize_raw":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[14,15],"tags":[179,437],"class_list":["post-4041","post","type-post","status-publish","format-standard","hentry","category-releases","category-security","tag-4-4","tag-minor-releases"],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pZhYe-13b","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/news\/wp-json\/wp\/v2\/posts\/4041","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wordpress.org\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/news\/wp-json\/wp\/v2\/users\/2738372"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/news\/wp-json\/wp\/v2\/comments?post=4041"}],"version-history":[{"count":9,"href":"https:\/\/wordpress.org\/news\/wp-json\/wp\/v2\/posts\/4041\/revisions"}],"predecessor-version":[{"id":13946,"href":"https:\/\/wordpress.org\/news\/wp-json\/wp\/v2\/posts\/4041\/revisions\/13946"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/news\/wp-json\/wp\/v2\/media?parent=4041"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wordpress.org\/news\/wp-json\/wp\/v2\/categories?post=4041"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wordpress.org\/news\/wp-json\/wp\/v2\/tags?post=4041"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}