ClassicPress 2.7.2 Release Notes

Announcements Release Notes
1

This is no longer the latest release of ClassicPress!
You can find the latest release at the top of the Release Notes subforum.

We’re happy to announce the release of ClassicPress 2.7.2.

This is a security release.

Security Fixes

  • Add authorisation check and prevent directory traversal in wp_ajax_media_cat_upload()

The ClassicPress core team would like to thank George928 for responsibly reporting this vulnerability and assisting in creating a fix for this release.

Contributors

In no particular order the following people have contributed to this ClassicPress release:

ClassicPress props

George928, Matt Robinson, Simone Fioravanti, Tim Kaye.

ClassicPress committers (in random order)

Matt Robinson.

Download this release

New sites Download
ClassicPress-release-2.7.2.zip
and follow the installation instructions.
Existing WordPress sites Download the migration plugin and follow the migration instructions.
Existing ClassicPress sites Use the built-in update mechanism (more info).

Full changelog

The full changelog is available on GitHub.

3 Likes