WordPress version 3.6.1 was released on September 11, 2013 and is a maintenance release that fixes 13 bugs in version 3.6.
WordPress 3.6.1 is also a security release for all previous WordPress versions and we strongly encourage you to update your sites immediately. It addresses three issues fixed by the WordPress security team:
- Block unsafe PHP unserialization that could occur in limited situations and setups, which can lead to remote code execution.
- Prevent a user with an Author role, using a specially crafted request, from being able to create a post “written by” another user.
- Fix insufficient input validation that could result in redirecting or leading a user to another website.
Additionally, they’ve adjusted security restrictions around file uploads to mitigate the potential for cross-site scripting.
As always, we highly recommend that you keep your WordPress installation, WordPress themes and WordPress plugins up to date to ensure that you’re running the most secure and feature rich version of WordPress.
If you need assistance with upgrading, please schedule your WordPress upgrade today via our WordSprung WordPress Upgrade Service.
Anyone who is already subscribed to one of our upgrade packages has already been upgraded to WordPress 3.6.1. If you’d like to make sure your site is always up to date, please check out out WordSprung WordPress Maintenance Packages.