Download WordPress 5.2.3

Version 5.2.3 of WordPress has been released. With this program, which is made available under a GPL license, it is possible to set up and maintain a website or blog. WordPress is easy to set up and can be up and running within five minutes if a server with PHP and MySQL is already available. There are possibilities to further extend the functionality of WordPress with plugins and the look with themes to adjust.

In version 5.0, in addition to a new theme, a completely new editor has also been introduced. However, the old editor is still present and is now called classic editor. In version 5.2.3 the following improvements have also been made.

WordPress 5.2.3 Security and Maintenance Release

This security and maintenance release features 29 fixes and enhancements. Plus, it adds a number of security fixes—see the list below.These bugs affect WordPress versions 5.2.2 and earlier; version 5.2.3 fixes them, so you’ll want to upgrade.If you haven’t yet updated to 5.2, there are also updated versions of 5.0 and earlier that fix the bugs for you.

Security Updates

• props to Simon Scannell of RIPS Technologies for finding and disclosing two issues. The first, a cross-site scripting (XSS) vulnerability found in post previews by contributors. The second was a cross-site scripting vulnerability in stored comments.
• props to Tim Coen for disclosing an issue where validation and sanitization of a URL could lead to an open redirect.
• Props to Anshul Jain for disclosing reflected cross-site scripting during media uploads.
• props to Zhouyuan Yang of Fortinet’s FortiGuard Labs who disclosed a vulnerability for cross-site scripting (XSS) in shortcode previews.
• Props to Ian Dunn of the Core Security Team for finding and disclosing a case where reflected cross-site scripting could be found in the dashboard.
• Props to Soroush Dalili (@irsdl) from NCC Group for disclosing an issue with URL sanitization that can lead to cross-site scripting (XSS) attacks.
• In addition to the above changes, we are also updating jQuery on older versions of WordPress. This change was added in 5.2.1 and is now being brought to older versions.

You can browse the full list of changes on Trac.