WordPress 6.2.2 Security Release (Restore shortcode support) – Jorcus

WordPress 6.2.2 Security Release (Restore shortcode support) WordPress

WordPress 6.2.2 has been released as a minor update that addresses one bug and one security issue. Users are strongly advised to update their sites immediately since it is a security release. All versions of WordPress since 5.9 have also been updated.

This release, WordPress 6.2.2, is a quick response to fix a problem that emerged in version 6.2.1 and to further patch a vulnerability that was addressed in that version as well. The next major release, version 6.3, is planned for August 2023.

If your sites support automatic background updates, the update process will begin automatically. Alternatively, you can download WordPress 6.2.2 from WordPress.org or update directly through your WordPress Dashboard by navigating to “Updates” and clicking on “Update Now.”

In terms of security updates, this release includes a fix that blocks themes from parsing shortcodes in user-generated data. The WordPress security team would like to express gratitude to Liam Gladdy of WP Engine for responsibly reporting this issue, allowing it to be addressed in this release.