WordPress 4.7.5 Security & Maintenance Release

WordPress 4.7.5 is now available which addresses six different security fixes. It is highly recommended to update immediately. The fixes are as follows:

  1. Insufficient redirect validation in the HTTP class.
  2. Improper handling of post meta data values in the XML-RPC API.
  3. Lack of capability checks for post meta data in the XML-RPC API.
  4. A Cross Site Request Forgery (CRSF) vulnerability was discovered in the filesystem credentials dialog.
  5. A cross-site scripting (XSS) vulnerability was discovered when attempting to upload very large files.
  6. A cross-site scripting (XSS) vulnerability was discovered related to the Customizer.

In addition, WordPress 4.7.5 contains 3 maintenance fixes to the 4.7 release series.

So head over to your Dashboard and make an update immediately. Simply click on the “Update Now” button. You can also, download WordPress 4.7.5 if you want manual updates.

That’s all, enjoy.

Let me know your thoughts in the comment section below.