Title: Version 4.4.21
Author: Jb Audras
Published: December 13, 2019

---

# Version 4.4.21

## In this article

 * [Installation/Update Information](https://wordpress.org/documentation/wordpress-version/version-4-4-21/?output_format=md#installation-update-information)
 * [Summary](https://wordpress.org/documentation/wordpress-version/version-4-4-21/?output_format=md#summary)
 * [List of Files Revised](https://wordpress.org/documentation/wordpress-version/version-4-4-21/?output_format=md#list-of-files-revised)

[ Back to top](https://wordpress.org/documentation/wordpress-version/version-4-4-21/?output_format=md#wp--skip-link--target)

On December 12, 2019, WordPress 4.4.21 was released to the public.

## 󠀁[Installation/Update Information](https://wordpress.org/documentation/wordpress-version/version-4-4-21/?output_format=md#installation-update-information)󠁿

To download WordPress 4.4.21, update automatically from the Dashboard > Updates 
menu in your site’s admin area or visit [https://wordpress.org/download/release-archive/](https://wordpress.org/download/release-archive/).

For step-by-step instructions on installing and updating WordPress:

 *  [Updating WordPress](https://wordpress.org/documentation/article/updating-wordpress/)

If you are new to WordPress, we recommend that you begin with the following:

 *  [New To WordPress – Where to Start](https://wordpress.org/support/article/new_to_wordpress_-_where_to_start/?output_format=md)
 *  [First Steps With WordPress](https://wordpress.org/support/article/first-steps-with-wordpress/?output_format=md)
   or [Upgrading WordPress Extended](https://wordpress.org/documentation/article/upgrading-wordpress-extended-instructions/)
 *  [WordPress Lessons](https://wordpress.org/support/article/wordpress-lessons/?output_format=md)

## 󠀁[Summary](https://wordpress.org/documentation/wordpress-version/version-4-4-21/?output_format=md#summary)󠁿

From the [WordPress 5.3.1 release post](https://wordpress.org/news/wordpress-5-3-1-security-and-maintenance-release),
WordPress versions 5.3 and earlier are affected by the following bugs, which are
fixed in version 5.3.1. Updated versions of WordPress 5.2 and older releases since
WordPress 3.7 are also available, for users who have not yet updated to 5.3.

 * Props to Daniel Bachhuber for finding an issue where an unprivileged user could
   make a post sticky via the REST API.
 * Props to [Simon Scannell of RIPS Technologies](https://blog.ripstech.com/authors/simon-scannell)
   for finding and disclosing an issue where cross-site scripting (XSS) could be
   stored in well-crafted links.
 * Props to the [WordPress.org](https://wordpress.org/) Security Team for hardening`
   wp_kses_bad_protocol()` to ensure that it is aware of the named colon attribute.

## 󠀁[List of Files Revised](https://wordpress.org/documentation/wordpress-version/version-4-4-21/?output_format=md#list-of-files-revised)󠁿

    ```wp-block-preformatted
    wp-includes/kses.php 
    wp-includes/default-filters.php
    wp-includes/formatting.php
    ```

First published

December 13, 2019

Last updated