On September 21, 2021, WordPress 5.1.11 was released to the public.
Installation/Update Information
To get this version, update automatically from the Dashboard > Updates menu in your site’s admin area or visit https://wordpress.org/download/release-archive/.
For step-by-step instructions on installing and updating WordPress:
If you are new to WordPress, we recommend that you begin with the following:
- New To WordPress – Where to Start
- First Steps With WordPress or Upgrading WordPress Extended
- WordPress Lessons
Summary
Security updates
3 security issues affects WordPress versions between 5.0 and 5.8. If you haven’t yet updated to 5.8, all WordPress versions since 5.0 have also been updated to fix the following security issues:
- Props @mdawaffe, member of the WordPress Security Team for their work fixing a data exposure vulnerability within the REST API.
- Props to Michał Bentkowski of Securitum for reporting a XSS vulnerability in the block editor.
- The Lodash library has been updated to version 4.17.21 in each branch to incorporate upstream security fixes.
In addition to these fixes, the security team would like to thank Steve Henty and Evan Ricafort for reporting a XSS vulnerability discovered during the 5.8 release’s beta period. This was previously fixed in the final release of WordPress 5.8.
Thank you to all of the reporters for privately disclosing the vulnerabilities. This gave the security team time to fix the vulnerabilities before WordPress sites could be attacked.
This version of WordPress was led by @desrosj and @circlecube.
List of Files Revised
wp-admin/about.php wp-includes/functions.php
Updated packages
@wordpress/annotations@1.0.9 @wordpress/block-library@2.2.19 @wordpress/blocks@6.0.8 @wordpress/components@7.0.9 @wordpress/dom@2.0.9 @wordpress/edit-post@3.1.12 @wordpress/editor@9.0.12 @wordpress/format-library@1.2.15 @wordpress/list-reusable-blocks@1.1.22 @wordpress/nux@3.0.10 @wordpress/rich-text@3.0.8