Update Feed

ClassicPress 1.1.4

21 June 2020

ClassicPress version 1.1.4 is now available (security release).

Upgrading to ClassicPress 1.1.4

ClassicPress 1.1.4 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply ClassicPress updates as new versions are released, or use Installatron's Clone feature to duplicate an existing ClassicPress install to test the 1.1.4 upgrade prior to applying it live. Get started managing your ClassicPress installations with Installatron

What's New in ClassicPress 1.1.4

ClassicPress 1.1.4 is a security release to match the security changes in WordPress versions 5.4.2 and 4.9.15 (both released on June 10, 2020).

Security

fixed an XSS issue where authenticated users with upload permissions are able to add JavaScript to media files
fixed an open redirect issue in wp_validate_redirect()
fixed an authenticated XSS issue via theme uploads
fixed an issue where set-screen-option can be misused by plugins leading to privilege escalation