We have deployed and verified WordPress 6.4.3. This is a security and maintenance release that the Core team announced on January 30, 2024. It includes five Core defect corrections, 16 defect corrections for the block editor, and two security fixes.
The two security fixes included in this release are:
- A PHP File Upload bypass via Plugin Installer (requiring admin privileges)
- An RCE POP Chains vulnerability
Clients who have subscribed to an Outcome Labs WordPress Care Plan have had their sites deployed and verified with WordPress 6.4.3. if you are not on a care plan and would like to subscribe, please contact us.