CyberStrides

  • home
  • about us
  • solutions
    • web solutions
    • SEO
    • email solution
  • contact us

WordPress 4.7.3 Available

March 20, 2017 By CyberStrides Leave a Comment

WordPress 4.7.3 was released on March 6, 2016.

From wordpress.org:

WordPress 4.7.3 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress versions 4.7.2 and earlier are affected by six security issues:

  1. Cross-site scripting (XSS) via media file metadata.  Reported by Chris Andrè Dale, Yorick Koster, and Simon P. Briggs.
  2. Control characters can trick redirect URL validation.  Reported by Daniel Chatfield.
  3. Unintended files can be deleted by administrators using the plugin deletion functionality.  Reported by TrigInc and xuliang.
  4. Cross-site scripting (XSS) via video URL in YouTube embeds.  Reported by Marc Montpas.
  5. Cross-site scripting (XSS) via taxonomy term names.  Reported by Delta.
  6. Cross-site request forgery (CSRF) in Press This leading to excessive use of server resources.  Reported by Sipke Mellema.

For all the details go to WordPress Release Site.

Filed Under: WordPress

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

about us

CyberStrides is a small company partnering with small businesses offering digital marketing … Read More

contact us

CyberStrides LLC

972.850.6965
sales@cyberstrides.com

Copyright © 2021 • CYBERSTRIDES LLC • www.cyberstrides.com • Terms of Service • Privacy Policy