WordPress.org

Languages: English • 4.7.5 日本語 (Add your language)

On 16 May 2017, WordPress 4.7.5 was released to the public.

Installation/Update Information

To download WordPress 4.7.5, update automatically from the Dashboard > Updates menu in your site's admin area or visit https://wordpress.org/download/release-archive/.

For step-by-step instructions on installing and updating WordPress:

• Updating WordPress

If you are new to WordPress, we recommend that you begin with the following:

• New To WordPress - Where to Start
• First Steps With WordPress or Upgrading WordPress Extended
• WordPress Lessons

Summary

From the WordPress 4.7.5 release post: WordPress versions 4.7.4 and earlier are affected by six security issues:

1. Insufficient redirect validation in the HTTP class. Reported by Ronni Skansing.
2. Improper handling of post meta data values in the XML-RPC API. Reported by Sam Thomas.
3. Lack of capability checks for post meta data in the XML-RPC API. Reported by Ben Bidner of the WordPress Security Team.
4. A Cross Site Request Forgery (CRSF) vulnerability was discovered in the filesystem credentials dialog. Reported by Yorick Koster.
5. A cross-site scripting (XSS) vulnerability was discovered when attempting to upload very large files. Reported by Ronni Skansing.
6. A cross-site scripting (XSS) vulnerability was discovered related to the Customizer. Reported by Weston Ruter of the WordPress Security Team.

In addition to the security issues above, WordPress 4.7.5 contains four maintenance fixes to the 4.7 release series.

Administration

• #40056 - Shift-click to select a range of checkboxes isn't working anymore since 4.7.3 update

Build/Test Tools

• #40002 - Bump Akismet External - 4.7.x/4.8 Edition

REST API

• #39683 - REST API JS Client: Should enable connecting to multiple endpoints at the same time

Taxonomy

• #40496 - get_the_terms() doesn't respect register_taxonomy()'s 'orderby' => 'term_order'

List of Files Revised

wp-admin/includes/file.php
wp-admin/js/common.js
wp-admin/js/common.min.js
wp-admin/js/customize-controls.js
wp-admin/js/customize-controls.min.js
wp-admin/js/updates.js
wp-admin/js/updates.min.js
wp-admin/about.php
wp-admin/customize.php
wp-content/plugins/akismet/_inc/img/logo-full-2x.png
wp-content/plugins/akismet/_inc/akismet.css
wp-content/plugins/akismet/_inc/akismet.js
wp-content/plugins/akismet/akismet.php
wp-content/plugins/akismet/class.akismet.php
wp-content/plugins/akismet/readme.txt
wp-includes/js/plupload/handlers.js
wp-includes/js/plupload/handlers.min.js
wp-includes/js/wp-api.js
wp-includes/js/wp-api.min.js
wp-includes/class-http.php
wp-includes/class-wp-customize-manager.php
wp-includes/class-wp-xmlrpc-server.php
wp-includes/taxonomy.php
wp-includes/version.php