This is an update about the release of a new version of WordPress. It is stated that all previous versions had a bug that allows nefarious users to delete files while not within the uploads directory. WordPress users have reported the bug and other similar issues. Various other bugs have also been fixed with the new 4.9.7 edition. The new edition can be easily downloaded.
- WordPress 4.9.7 is a security and maintenance release for all versions since WordPress 3.7.
- 17 Total issues have been fixed in WordPress 4.9.7 making this the best version.
- WordPress 4.9.7 is now moving to WordPress 4.9.8.
“WordPress versions 4.9.6 and earlier are affected by a media issue that could potentially allow a user with certain capabilities to attempt to delete files outside the uploads directory.”
(abstract 3PZDSVZ3J5HZI9PTUP47PSMOOY5N49 3QHK8ZVMIMIV2S5BNU3H9YJQ5K3BLK AEAEDUGW299VK)(authorquote 3FDWKV9VCN2SHPY8XUGPPHVIKVKMUI 3LPW2N6LKT2WW2BWVY45XZFILPLU56 A22HREFDIY7AZN)(keypoints 3XEDXEGFX3OHBFMPEBPPLXF7F1PK0C 3WS1NTTKEYC8IDS5333UU4IOUUE0FB A2DBZBT85UQYO4)