Title: Version 4.7.26
Author: Estela Rueda
Published: May 16, 2023
Last modified: May 17, 2023

---

# Version 4.7.26

## In this article

 * [Installation/Update Information](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#installation-update-information)
 * [Summary](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#summary)
    - [Maintenance updates](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#maintenance-updates)
    - [Security updates](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#security-updates)
 * [Credits](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#credits)
 * [List of updated packages](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#list-of-updated-packages)
 * [List of Files Revised](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#list-of-files-revised)

[ Back to top](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#wp--skip-link--target)

On May 16, 2023, WordPress 4.7.26 was released to the public.

## 󠀁[Installation/Update Information](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#installation-update-information)󠁿

To get this version, update automatically from the Dashboard > Updates menu in your
site’s admin area or visit [https://wordpress.org/download/release-archive/](https://wordpress.org/download/release-archive/).

For step-by-step instructions on installing and updating WordPress:

 * [Updating WordPress](https://wordpress.org/documentation/article/updating-wordpress/)

If you are new to WordPress, we recommend that you begin with the following:

 * [New To WordPress – Where to Start](https://wordpress.org/support/article/new_to_wordpress_-_where_to_start/?output_format=md)
 * [First Steps With WordPress](https://wordpress.org/support/article/first-steps-with-wordpress/?output_format=md)
   or [Upgrading WordPress Extended](https://wordpress.org/documentation/article/upgrading-wordpress-extended-instructions/)
 * [WordPress Lessons](https://wordpress.org/support/article/wordpress-lessons/?output_format=md)

## 󠀁[Summary](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#summary)󠁿

### 󠀁[Maintenance updates](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#maintenance-updates)󠁿

This minor release features [20 bug fixes in Core](https://core.trac.wordpress.org/query?milestone=6.2.1&group=component&col=id&col=summary&col=status&col=owner&col=type&col=priority&col=milestone&order=priority)
and [10 bug fixes for the block editor](https://github.com/orgs/WordPress/projects/88).
You can review a summary of the maintenance updates in this release by reading the
[Release Candidate announcement](https://make.wordpress.org/core/2023/05/09/wordpress-6-2-1-rc1-is-now-available/).

### 󠀁[Security updates](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#security-updates)󠁿

The security team would like to thank the following people for responsibly reporting
vulnerabilities, and allowing them to be fixed in this release.

 * Block themes parsing shortcodes in user generated data; thanks to Liam Gladdy
   of [WP Engine](https://wpengine.com/) for reporting this issue
 * A CSRF issue updating attachment thumbnails; reported by [John Blackbourn](https://johnblackbourn.com/)
   of the WordPress security team
 * A flaw allowing XSS via open embed auto discovery; reported independently by 
   Jakub Żoczek of [Securitum](https://research.securitum.com/) and during a third
   party security audit
 * Bypassing of KSES sanitization in block attributes for low privileged users; 
   discovered during a third party security audit.
 * A path traversal issue via translation files; reported independently by Ramuel
   Gall and during a third party security audit.

## 󠀁[Credits](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#credits)󠁿

This release was led by [Jb Audras](https://profiles.wordpress.org/audrasjb), [George Mamadashvili](https://profiles.wordpress.org/mamaduka/),
[Sergey Biryukov](https://profiles.wordpress.org/SergeyBiryukov) and [Peter Wilson](https://profiles.wordpress.org/peterwilsoncc).

Thank you to everyone who helped make WordPress 6.2.1 happen:

[Adam Silverstein](https://profiles.wordpress.org/adamsilverstein/), [Aki Hamano](https://profiles.wordpress.org/wildworks/),
[amin](https://profiles.wordpress.org/amin7/), [Andrew Ozz](https://profiles.wordpress.org/azaozz/),
[Andrew Serong](https://profiles.wordpress.org/andrewserong/), [André](https://profiles.wordpress.org/oandregal/),
[Ari Stathopoulos](https://profiles.wordpress.org/aristath/), [Birgit Pauli-Haack](https://profiles.wordpress.org/bph/),
[Chirag Rathod](https://profiles.wordpress.org/chiragrathod103/), [Colin Stewart](https://profiles.wordpress.org/costdev/),
[Daniel Richards](https://profiles.wordpress.org/talldanwp/), [David Baumwald](https://profiles.wordpress.org/davidbaumwald/),
[David Biňovec](https://profiles.wordpress.org/davidbinda/), [Dennis Snell](https://profiles.wordpress.org/dmsnell/),
[devshagor](https://profiles.wordpress.org/shagors/), [Dhrumil Kumbhani](https://profiles.wordpress.org/dhrumilk/),
[Dominik Schilling](https://profiles.wordpress.org/ocean90/), [Ella](https://profiles.wordpress.org/ellatrix/),
[George Mamadashvili](https://profiles.wordpress.org/mamaduka/), [Isabel Brison](https://profiles.wordpress.org/isabel_brison/),
[Jb Audras](https://profiles.wordpress.org/audrasjb/), [Joe Dolson](https://profiles.wordpress.org/joedolson/),
[Joen A.](https://profiles.wordpress.org/joen/), [John Blackbourn](https://profiles.wordpress.org/johnbillion/),
[Jonathan Desrosiers](https://profiles.wordpress.org/desrosj/), [JuanMa Garrido](https://profiles.wordpress.org/juanmaguitar/),
[Juliette Reinders Folmer](https://profiles.wordpress.org/jrf/), [Kai Hao](https://profiles.wordpress.org/kevin940726/),
[Kailey (trepmal)](https://profiles.wordpress.org/trepmal/), [Marc](https://profiles.wordpress.org/mdxfr/),
[Marine EVAIN](https://profiles.wordpress.org/marineevain/), [Matt Wiebe](https://profiles.wordpress.org/mattwiebe/),
[Mukesh Panchal](https://profiles.wordpress.org/mukesh27/), [nendeb](https://profiles.wordpress.org/nendeb55/),
[Nick Diego](https://profiles.wordpress.org/ndiego/), [nickpap](https://profiles.wordpress.org/nickpap/),
[Nik Tsekouras](https://profiles.wordpress.org/ntsekouras/), [Pavan Patil](https://profiles.wordpress.org/pavanpatil1/),
[Peter Wilson](https://profiles.wordpress.org/peterwilsoncc/), [pouicpouic](https://profiles.wordpress.org/pouicpouic/),
[Riad Benguella](https://profiles.wordpress.org/youknowriad/), [Ryan Welcher](https://profiles.wordpress.org/welcher/),
[Scott Reilly](https://profiles.wordpress.org/coffee2code/), [Sergey Biryukov](https://profiles.wordpress.org/sergeybiryukov/),
[Stephen Bernhardt](https://profiles.wordpress.org/sabernhardt/), [tmatsuur](https://profiles.wordpress.org/tmatsuur/),
[TobiasBg](https://profiles.wordpress.org/tobiasbg/), [Tonya Mork](https://profiles.wordpress.org/hellofromtonya/),
[Ugyen Dorji](https://profiles.wordpress.org/ugyensupport/), [Weston Ruter](https://profiles.wordpress.org/westonruter/),
and [zieladam](https://profiles.wordpress.org/zieladam/).

## 󠀁[List of updated packages](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#list-of-updated-packages)󠁿

    ```wp-block-preformatted
    COMING SOON
    ```

## 󠀁[List of Files Revised](https://wordpress.org/documentation/wordpress-version/version-4-7-26/?output_format=md#list-of-files-revised)󠁿

    ```wp-block-preformatted
    COMING SOON
    ```

First published

May 16, 2023

Last updated

May 17, 2023