WordPress: WordPress Version 4.4.2 has been Released

A new update was recently released by WordPress. This update is considered as a security update so it’s highly suggested to comply and apply this update to your website(s).

From the announcement post, WordPress versions 4.4.1 and earlier are affected by two security issues: a possible SSRF for certain local URIs, reported by Ronni Skansing; and an open redirection attack, reported by Shailesh Suthar.

• #36435 HTTP: 0.1.2.3 is not a valid IP.
• #36444 Better validation of the URL used in HTTP redirects.

In addition to the security issues above, WordPress 4.4.2 fixes 17 bugs from 4.4 and 4.4.1

List of Files Revised

wp-admin/includes/image.php
wp-admin/js/inline-edit-tax.min.js
wp-admin/js/inline-edit-tax.js
wp-admin/widgets.php
wp-admin/about.php
wp-includes/ms-blogs.php
wp-includes/class-wp-customize-manager.php
wp-includes/js/wp-emoji-loader.js
wp-includes/js/wp-emoji-loader.min.js
wp-includes/random_compat/random.php
wp-includes/formatting.php
wp-includes/taxonomy.php
wp-includes/comment-template.php
wp-includes/load.php
wp-includes/query.php
wp-includes/kses.php
wp-includes/http.php
wp-includes/version.php
wp-includes/class-wp-comment-query.php
wp-includes/pluggable.php
readme.html

wordpress.org