What’s New in WordPress 5.4.2? Fixed 6 security issues

Last Updated：2020/06/14

On June 10, 2020, WordPress 5.4.2 was released to fix a weakness! Here's what's new in the update. WordPress 5.4.2 fixes 6 security issues and 22 bugs in WordPress 5.4.2 It is.

WordPress 5.4.2 Release Date

WordPress 5.4.2 was released on June 10, 2020. Update as soon as possible for the security release.

WordPress 5.4.1 was released on April 29, 2020, so about a month later Update.

Here is a list of release dates for each version of WordPress. Please refer to it when you check the release dates of other versions.

Update Details

Updating to WordPress 5.4.2 will fix the following 6 security issues.

1. XSS Vulnerability that Allows Unauthorized Users to Add JavaScript to Block Editor
2. XSS Vulnerability that allows users with upload privileges to add JavaScript to media files
3. Redirect issues with wp_validate_redirect()
4. XSS Vulnerability in Theme Upload Authentication
5. An issue where set-screen-option is misused by plugins, leading to privilege escalation
6. Comments on password-protected posts and pages appear under certain conditions

Server Requirements

The following requirements are recommended to run WordPress 5.4.2.

• PHP 7.3 or higher
• MySQL 5.6 or higher, or MariaDB 10.1 or higher
• Nginx or Apache

How to download WordPress 5.4.2

WordPress 5.4.2 is available on the download page.

For more information on how to download WordPress, please refer to the following article.

How to update to WordPress 5.4.2

To update to WordPress 5.4.2, go to the update page in your dashboard and click the Update Now button.

If auto-update is enabled, the update will start in the background.

How to downgrade?

If you upload to WordPress 5.4.2 and find a problem, install WP Downgrade | Specific Core Version in You can downgrade

Related Post

Others have also seen this article.