ClassicPress 2.7.2 Release Notes

Announcements Release Notes
1

This is a security release.

Security Fixes

  • Add authorisation check and prevent directory traversal in wp_ajax_media_cat_upload()

The ClassicPress core team would like to thank https://github.com/George928 for responsibly reporting this vulnerability and assisting in creating a fix for this release.

Contributors

In no particular order the following people have contributed to this ClassicPress release:

ClassicPress props

George928, Matt Robinson, Simone Fioravanti, Tim Kaye.

ClassicPress committers (in random order)

Matt Robinson.

Download this release

New sites Download
ClassicPress-release-2.7.2.zip
and follow the installation instructions.
Existing WordPress sites Download the migration plugin and follow the migration instructions.
Existing ClassicPress sites Use the built-in update mechanism (more info).

Full changelog

The full changelog is available on GitHub.

2 Likes