Important WordPress Security Update 4.9.7
WordPress has released an important security update, version 4.9.7. Per the WordPress.org website, the highlighted bug fixes in this version are:
- Taxonomy: Improve cache handling for term queries.
- Posts, Post Types: Clear post password cookies when logging out.
- Widgets: Allow basic HTML tags in sidebar descriptions on Widgets admin screen.
- Community Events Dashboard: Always show the nearest WordCamp if one is coming up, even if there are multiple Meetups happening first.
- Privacy: Make sure default privacy content does not cause a fatal error when flushing rewrite rules outside of the admin context.
Why Should I Update?
WordPress is a very popular platform, which makes it a prime target for attackers. Whenever a new version is released, attackers download it as quickly as users who are set up for automatic updates. As a site owner or developer, you should update to the latest version of WordPress as soon as it is released by the WordPress security team. Keeping up to date will help prevent you from experiencing any issues stemming from the vulnerabilities which were patched with the latest upgrade. It is also necessary to ensure that all plug-ins and themes are up to date as well, as they can allow someone to access through their own vulnerabilities.
What Should I Do Now?
We recommend that anyone who has not set up automatic updates log into their WordPress Admin panel and click the update button now. While you are there, ensure all plugins are up to date as well. Remember that those alerts are red for a reason; they are trying to get your attention.
What Can I Do In the Future?
Our service allows for an alternative automatic update system, using our installer application. You can set the installer application to back up and update any WordPress installation automatically. That automatic back up feature can be very helpful in recovering from issues which may arise from plug-in or theme installations. With our installer application, you can actually take a snapshot of your site files before making any changes. You will be able to ensure that you have the latest version of your site, as our backup may be from multiple hours prior to your change. If you are interested in the installer application or have any questions, please contact our Sales Team.
What If I Need Help?
Our Support Team is available via ticket to provide you with quick answers to any questions which may arise during the WordPress security update process. Regardless of your decision to use our installer application, our Support Team is happy to assist you with backing up your site or restoring your site from a backup.