WordPress has recently released its latest update 5.3.1 with security and maintenance with 46 fixes and enhancement.
They had also announced that their next major update will be 5.4.
How to update WordPress?
You can update your WordPress by clicking on top left panel Dashboard → Updates and click Update Now.
Security update
WordPress has fixed 4 security vulnerabilities that affect the versions before 5.3. If you haven’t updated your WordPress have a quick update also they have fixed these vulnerabilities in older versions too.
WordPress has fixed 4 security vulnerabilities that affect the versions before 5.3. If you haven’t updated your WordPress have a quick update also they have fixed these vulnerabilities in older versions too.
WordPress has fixed 4 security vulnerabilities that affect the versions before 5.3. If you haven’t updated your WordPress have a quick update also they have fixed these vulnerabilities in older versions too.
WordPress has fixed 4 security vulnerabilities that affect the versions before 5.3. If you haven’t updated your WordPress have a quick update also they have fixed these vulnerabilities in older versions too.
- There was an issue in older versions that allows an unprivileged user could make a post sticky via the REST API.
- There were two cross-site scripting(XSS) vulnerabilities that could be stored in a well-crafted link and another one, a stored XSS vulnerability using block editor content.
- Props to the WordPress.org Security Team for hardening wp_kses_bad_protocol() to ensure that it is aware of the named colon attribute.
Maintenance Updates
There are some maintenance updates in this version.
- Administration: improvements to admin form controls height and alignment standardization (see related dev note), dashboard widget links accessibility and alternate color scheme readability issues (see related dev note).
- Block editor: fix Edge scrolling issues and intermittent JavaScript issues.
- Bundled themes: add customizer option to show/hide author bio, replace JS-based smooth scroll with CSS (see related dev note) and fix Instagram embed CSS.
- Date/time: improve non-GMT dates calculation, fix date format output in specific languages and make get_permalink() more resilient against PHP timezone changes.
- Embeds: remove CollegeHumor oEmbed provider as the service doesn’t exist anymore.
- External libraries: update sodium_compat.
- Site health: allow the remind interval for the admin email verification to be filtered.
- Uploads: avoid thumbnails overwriting other uploads when filename matches, and exclude PNG images from scaling after upload.
- Users: ensure administration email verification uses the user’s locale instead of the site locale
