On April 9, 2024, WordPress 6.2.5 was released to the public.
Installation/Update Information
To get this version, update automatically from the Dashboard > Updates menu in your site’s admin area or visit https://wordpress.org/download/release-archive/.
For step-by-step instructions on installing and updating WordPress:
If you are new to WordPress, we recommend that you begin with the following:
- New To WordPress – Where to Start
- First Steps With WordPress or Upgrading WordPress Extended
- WordPress Lessons
Summary
Security updates
WordPress 6.5.1 includes 1 security fix:
- A cross-site scripting (XSS) vulnerability affecting the Avatar block type; reported by John Blackbourn of the WordPress security team. Many thanks to Mat Rollings for assisting with the research.
The earliest release requiring patching was WordPress 6.1.
Thank you to everyone who contributed to this version. For more information, browse the full list of changes on Trac.
Change log
List of files revised
/wp-admin/about.php
/wp-includes/version.php
/wp-includes/assets/script-loader-packages.min.php
/wp-includes/blocks/avatar.php
package-lock.json
package.json
List of packages revised
@wordpress/block-directory - 4.28.10
@wordpress/block-editor - 12.19.8
@wordpress/block-library - 8.28.10
@wordpress/commands - 0.22.6
@wordpress/components - 26.0.6
@wordpress/core-commands - 0.20.8
@wordpress/core-data - 6.28.8
@wordpress/customize-widgets - 4.28.10
@wordpress/dataviews - 0.5.7
@wordpress/edit-post - 7.28.10
@wordpress/edit-site - 5.28.10
@wordpress/edit-widgets - 5.28.10
@wordpress/editor - 13.28.8
@wordpress/format-library - 4.28.8
@wordpress/interface - 5.28.6
@wordpress/list-reusable-blocks - 4.28.6
@wordpress/nux - 8.13.6
@wordpress/patterns - 1.12.8
@wordpress/plugins - 6.19.6
@wordpress/preferences - 3.28.6
@wordpress/reusable-blocks - 4.28.8
@wordpress/server-side-render - 4.28.7
@wordpress/widgets - 3.28.8