Version 6.4.2

On December 6, 2023, WordPress 6.4.2 was released to the public.

Installation/Update Information

To get this version, update automatically from the Dashboard > Updates menu in your site’s admin area or visit

For step-by-step instructions on installing and updating WordPress:

If you are new to WordPress, we recommend that you begin with the following:


Maintenance & Security updates

WordPress 6.4.2 fixes 7 Big fixes

  • #59819 – Change CSS align-item from start / end to flex-start / flex-end for full browser support
  • #59821 – Irrelevant comment for translators
  • #59847 – Since WordPress 6.4, the functions.php of a theme moved to a different location using register_theme_directory is no longer called
  • #59869 – Incorrect reference in docblock for _register_theme_block_patterns
  • #59882 – Expose serialized template content to callbacks registered to the `hooked_block_types` filter.
  • #59891 – Incorrect example for WP_HTML_Tag_Processor class
  • #59935 – Site editor: logo

The security team addressed the following vulnerability in WordPress 6.4.2

  • A Remote Code Execution vulnerability that is not directly exploitable in core; however, the security team feels that there is a potential for high severity when combined with some plugins, especially in multisite installations.

The 6.4.2 release was led by @jorbin.

Thank you to everyone who contributed to WordPress 6.4.2

Aaron JorbinAki HamanoAkira TachibanaAlex ConchaAngela JinAnton VlasenkoBarrybernhard-reiterCaleb BurksCorey WorrellcrstaufDarren Ethier (nerrad)David BaumwaldDennis SnellDion HulseErikFabian TodtFelix ArntzHéctor PrietoironprogrammerIsabel BrisonJb AudrasJeffrey PaulJessica LyschikJoe McGillJohn BlackbournJonathan DesrosiersKharis SulistiyonoKrupal PanchalKylen Downsmeta4Mike SchroderMukesh PanchalpartyfrikadellePeter WilsonPieterjan DeneysrawrlyrebasaurusSergey BiryukovTonya Morkvortfu

For more information, browse the full list of changes on Trac.

Change log

List of files revised


First published

Last updated