Title: Version 4.1.34
Author: Jb Audras
Published: January 6, 2022

---

# Version 4.1.34

## In this article

 * [Installation/Update Information](https://wordpress.org/documentation/wordpress-version/version-4-1-34/?output_format=md#installation-update-information)
 * [Summary](https://wordpress.org/documentation/wordpress-version/version-4-1-34/?output_format=md#summary)
    - [Security updates](https://wordpress.org/documentation/wordpress-version/version-4-1-34/?output_format=md#security-updates)
 * [List of Files Revised](https://wordpress.org/documentation/wordpress-version/version-4-1-34/?output_format=md#list-of-files-revised)

[ Back to top](https://wordpress.org/documentation/wordpress-version/version-4-1-34/?output_format=md#wp--skip-link--target)

On January 6, 2022, WordPress 4.1.34 was released to the public.

## 󠀁[Installation/Update Information](https://wordpress.org/documentation/wordpress-version/version-4-1-34/?output_format=md#installation-update-information)󠁿

To get this version, update automatically from the Dashboard > Updates menu in your
site’s admin area or visit [https://wordpress.org/download/release-archive/](https://wordpress.org/download/release-archive/).

For step-by-step instructions on installing and updating WordPress:

 * [Updating WordPress](https://wordpress.org/documentation/article/updating-wordpress/)

If you are new to WordPress, we recommend that you begin with the following:

 * [New To WordPress – Where to Start](https://wordpress.org/support/article/new_to_wordpress_-_where_to_start/?output_format=md)
 * [First Steps With WordPress](https://wordpress.org/support/article/first-steps-with-wordpress/?output_format=md)
   or [Upgrading WordPress Extended](https://wordpress.org/documentation/article/upgrading-wordpress-extended-instructions/)
 * [WordPress Lessons](https://wordpress.org/support/article/wordpress-lessons/?output_format=md)

## 󠀁[Summary](https://wordpress.org/documentation/wordpress-version/version-4-1-34/?output_format=md#summary)󠁿

### 󠀁[Security updates](https://wordpress.org/documentation/wordpress-version/version-4-1-34/?output_format=md#security-updates)󠁿

3 security issues affect WordPress versions between 3.7 and 5.8. If you haven’t 
yet updated to 5.8, all WordPress versions since 3.7 have also been updated to fix
the following security issues:

 * Props to Karim El Ouerghemmi and Simon Scannell of [SonarSource](https://www.sonarsource.com/)
   for disclosing an issue with stored XSS through post slugs.
 * Props to Simon Scannell of [SonarSource](https://www.sonarsource.com/) for reporting
   an issue with Object injection in some multisite installations.
 * Props to ngocnb and khuyenn from [GiaoHangTietKiem JSC](https://giaohangtietkiem.vn/)
   for working with [Trend Micro Zero Day Initiative](https://www.zerodayinitiative.com/)
   on reporting a WP_Query SQLi vulnerability.
 * Props to Ben Bidner from the WordPress security team for reporting a SQL injection
   vulnerability in WP_Meta_Query.

Thank you to all of the reporters for [privately disclosing the vulnerabilities](https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/).
This gave the security team time to fix the vulnerabilities before WordPress sites
could be attacked. Thank you to the members of the WordPress security team for implementing
these fixes in WordPress.

For more information, browse the [full list of changes on Trac](https://core.trac.wordpress.org/query?milestone=5.8.3&group=component&col=id&col=summary&col=milestone&col=owner&col=type&col=status&col=priority&order=priority).

This version of WordPress was led by [Jonathan Desrosiers](https://profiles.wordpress.org/desrosj/)
and [Evan Mullins](https://profiles.wordpress.org/circlecube/).

## 󠀁[List of Files Revised](https://wordpress.org/documentation/wordpress-version/version-4-1-34/?output_format=md#list-of-files-revised)󠁿

    ```wp-block-preformatted
    /wp-admin/includes/upgrade.php
    /wp-includes/class-wp-meta-query.php
    /wp-includes/class-wp-tax-query.php
    /wp-includes/formatting.php
    /wp-includes/post.php
    ```

First published

January 6, 2022

Last updated