{"id":12709945,"date":"2020-04-29T19:59:45","date_gmt":"2020-04-29T19:59:45","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=helphub_version&amp;p=12709945"},"modified":"2020-04-29T19:59:45","modified_gmt":"2020-04-29T19:59:45","slug":"version-5-4-1","status":"publish","type":"helphub_version","link":"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-4-1\/","title":{"rendered":"Version 5.4.1"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">On April 29, 2020, WordPress 5.4.1 was released to the public. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Installation\/Update Information<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To download WordPress 5.4.1, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit <a href=\"https:\/\/wordpress.org\/download\/release-archive\/\">https:\/\/wordpress.org\/download\/release-archive\/<\/a>. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For step-by-step instructions on installing and updating WordPress:\n<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li> <a href=\"https:\/\/wordpress.org\/documentation\/article\/updating-wordpress\/\">Updating WordPress<\/a><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If you are new to WordPress, we recommend that you begin with the following:\n<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li> <a href=\"\/support\/article\/new_to_wordpress_-_where_to_start\/\">New To WordPress &#8211; Where to Start<\/a><\/li><li> <a href=\"\/support\/article\/first-steps-with-wordpress\/\">First Steps With WordPress<\/a> or <a href=\"https:\/\/wordpress.org\/documentation\/article\/upgrading-wordpress-extended-instructions\/\">Upgrading WordPress Extended<\/a><\/li><li> <a href=\"\/support\/article\/wordpress-lessons\/\">WordPress Lessons<\/a><\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Summary<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Security updates<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Six security issues affect WordPress versions 5.4 and earlier; version 5.4.1 fixes them, so you\u2019ll want to upgrade. If you haven\u2019t yet updated to 5.4, there are also updated versions of 5.3 and earlier that fix the security issues.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Props to\u00a0<a href=\"https:\/\/hackerone.com\/hijibiji\">Muaz Bin Abdus Sattar<\/a>\u00a0and\u00a0<a href=\"https:\/\/hackerone.com\/dyennez\">Jannes<\/a>\u00a0who both independently reported an issue where password reset tokens were not properly invalidated<\/li><li>Props to\u00a0<a href=\"https:\/\/github.com\/ka1n4t\">ka1n4t<\/a>\u00a0for finding an issue where certain private posts can be viewed unauthenticated<\/li><li>Props to\u00a0<a href=\"https:\/\/evanricafort.com\/\">Evan Ricafort<\/a>\u00a0for discovering an XSS issue in the Customizer<\/li><li>Props to Ben Bidner from the WordPress Security Team who discovered an XSS issue in the search block<\/li><li>Props to Nick Daugherty from WPVIP.com \/ WordPress Security Team who discovered an XSS issue in wp-object-cache<\/li><li>Props to Ronnie Goodrich (<a href=\"https:\/\/hackerone.com\/kahoots\">Kahoots<\/a>) and\u00a0<a href=\"http:\/\/pentestusa.com\/\">Jason Medeiros<\/a>\u00a0who independently reported an XSS issue in file uploads.<\/li><li>Additionally, an authenticated XSS issue in the block editor was discovered by Nguyen the Duc in WordPress 5.4 RC1 and RC2. It was fixed in 5.4 RC5. We wanted to be sure to give credit and thank them for all of their work in making WordPress more secure.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Maintenance updates<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">WordPress 5.4.1 also fixes some regressions introduced in version 5.4:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/core.trac.wordpress.org\/ticket\/49838\">#49838<\/a> \u2013 Accessibility: Fix the headings hierarchy on the Freedoms page<\/li><li><a href=\"https:\/\/core.trac.wordpress.org\/ticket\/49798\">#49798<\/a> \u2013 Customize: Give the WordPress logo a white background for dark mode browsers<\/li><li><a href=\"https:\/\/core.trac.wordpress.org\/ticket\/49853\">#49853<\/a> \u2013 Mail: Make the check for empty post title in&nbsp;<code>wp-mail.php<\/code>&nbsp;more resilient<\/li><li><a href=\"https:\/\/core.trac.wordpress.org\/ticket\/49753\">#49753<\/a> \u2013 Media: Remove <code>display: none;<\/code> from the (visually hidden) <code>&lt;input type=\"file\"&gt;<\/code> button used in Plupload to select files for uploading. Fixes selecting files in Edge &lt;= 44 and iOS Safari<\/li><li><a href=\"https:\/\/core.trac.wordpress.org\/ticket\/49772\">#49772<\/a> \u2013 Privacy: Support additional elements (table, ol, ul) in privacy policy guide new styling<\/li><li><a href=\"https:\/\/core.trac.wordpress.org\/ticket\/49802\">#49802<\/a> \u2013 Privacy: Make the deprecated <code>wp_get_user_request_data()<\/code> function available on front end<\/li><li><a href=\"https:\/\/core.trac.wordpress.org\/ticket\/49645\">#49645<\/a> \u2013 REST API: Fix revisions controller get_item permission check<\/li><li><a href=\"https:\/\/core.trac.wordpress.org\/ticket\/49648\">#49648<\/a> \u2013 REST API: Fix <code>_fields<\/code> filtering of registered rest fields<\/li><li><a href=\"https:\/\/core.trac.wordpress.org\/ticket\/49824\">#49824<\/a> \u2013 Site Health: Instantiation prevents use of some hooks by plugins<\/li><li><a href=\"https:\/\/core.trac.wordpress.org\/ticket\/49759\">#49759<\/a> \u2013 Taxonomy: Un-deprecate <code>category_link<\/code> and <code>tag_link<\/code> filters<\/li><li><a href=\"https:\/\/core.trac.wordpress.org\/ticket\/49974\">#49974<\/a> \u2013 Block Editor updates<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Thank you to everyone who contributed to WordPress 5.4.1:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/profiles.wordpress.org\/xknown\/\">Alex Concha<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/afercia\/\">Andrea Fercia<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/aduth\/\">Andrew Duthie<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/azaozz\/\">Andrew Ozz<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/afragen\/\">Andy Fragen<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/apeatling\/\">Andy Peatling<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/arnaudbroes\/\">arnaudbroes<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/chrisvanpatten\/\">Chris Van Patten<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/talldanwp\/\">Daniel Richards<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/dhrrob\/\">DhrRob<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/dono12\/\">Dono12<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/dudo\/\">dudo<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/ehti\/\">ehtis<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/ellatrix\/\">Ella van Durpe<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/garrett-eclipse\/\">Garrett Hyder<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/ianbelanger\/\">Ian Belanger<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/ipstenu\/\">Ipstenu (Mika Epstein)<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/whyisjake\/\">Jake Spurlock<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/audrasjb\/\">Jb Audras<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/johnbillion\/\">John Blackbourn<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/johnjamesjacoby\/\">John James Jacoby<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/desrosj\/\">Jonathan Desrosiers<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/jorgefilipecosta\/\">Jorge Costa<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/kadamwhite\/\">K. Adam White<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/ryelle\/\">Kelly Choyce-Dwan<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/markrh\/\">MarkRH<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/mattyrob\/\">mattyrob<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/mcsf\/\">Miguel Fonseca<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/batmoo\/\">Mohammad Jangda<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/mukesh27\/\">Mukesh Panchal<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/nickdaugherty\/\">Nick Daugherty<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/noahtallen\/\">noahtallen<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/pbiron\/\">Paul Biron<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/westi\/\">Peter Westwood<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/peterwilsoncc\/\">Peter Wilson<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/pikamander2\/\">pikamander2<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/r-a-y\/\">r-a-y<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/youknowriad\/\">Riad Benguella<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/noisysocks\/\">Robert Anderson<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/otto42\/\">Samuel Wood (Otto)<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/sergeybiryukov\/\">Sergey Biryukov<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/sorenbronsted\/\">S\u00f8ren Br\u00f8nsted<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/sstoqnov\/\">Stanimir Stoyanov<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/isabel_brison\/\">tellthemachines<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/timothyblynjacobs\/\">Timothy Jacobs<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/toro_unit\/\">Toro_Unit (Hiroshi Urabe)<\/a>, <a href=\"https:\/\/profiles.wordpress.org\/treecutter\/\">treecutter<\/a>, and <a href=\"https:\/\/profiles.wordpress.org\/yohannp\/\">yohannp<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For more information,&nbsp;<a href=\"https:\/\/core.trac.wordpress.org\/query?status=closed&amp;resolution=fixed&amp;milestone=5.4.1&amp;order=priority\">browse the full list of changes on Trac<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">List of Files Revised<\/h2>\n\n\n\n<pre class=\"wp-block-preformatted\">\/wp-admin\/css\/about.css\n\/wp-admin\/css\/edit.css\n\/wp-admin\/freedoms.php\n\/wp-admin\/images\/w-logo-blue.png\n\/wp-admin\/includes\/deprecated.php\n\/wp-includes\/assets\/script-loader-packages.php\n\/wp-includes\/blocks\/rss.php\n\/wp-includes\/blocks\/search.php\n\/wp-includes\/cache.php\n\/wp-includes\/class-wp-customize-manager.php\n\/wp-includes\/class-wp-object-cache.php\n\/wp-includes\/class-wp-query.php\n\/wp-includes\/css\/media-views.css\n\/wp-includes\/deprecated.php\n\/wp-includes\/formatting.php\n\/wp-includes\/post.php\n\/wp-includes\/rest-api\/endpoints\/class-wp-rest-controller.php\n\/wp-includes\/rest-api\/endpoints\/class-wp-rest-revisions-controller.php\n\/wp-includes\/taxonomy.php\n\/wp-includes\/user.php\n\/wp-includes\/version.php\n\/wp-mail.php\n\/wp-settings.php<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Updated packages<\/h2>\n\n\n\n<pre class=\"wp-block-preformatted\">@wordpress\/block-directory: 1.5.8\n@wordpress\/block-editor: 3.7.8\n@wordpress\/block-library: 2.14.8\n@wordpress\/edit-post: 3.13.10\n@wordpress\/editor: 9.12.8\n@wordpress\/format-library: 1.14.8<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>On April 29, 2020, WordPress 5.4.1 was released to the public. Installation\/Update Information To download WordPress 5.4.1, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit https:\/\/wordpress.org\/download\/release-archive\/. For step-by-step instructions on installing and updating WordPress: Updating WordPress If you are new to WordPress, we recommend that you begin with [&hellip;]<\/p>\n","protected":false},"author":8670591,"featured_media":0,"menu_order":0,"template":"","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false},"helphub_major_release":[65],"class_list":["post-12709945","helphub_version","type-helphub_version","status-publish","hentry","helphub_major_release-5_4"],"revision_note":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/12709945","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions"}],"about":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/types\/helphub_version"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/users\/8670591"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/12709945\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/media?parent=12709945"}],"wp:term":[{"taxonomy":"helphub_major_release","embeddable":true,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/helphub_major_release?post=12709945"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}