WordPress updated three security vulnerabilities and recommended everyone update their core WordPress. We normally would wait between minor versions unless there is a security concern or recommendation from WordPress. But because of the recommendation, we are updating our managed hosting clients ahead of schedule.

Most of the vulnerabilities stemmed from cross-site scripting (XSS) vulnerabilities.

What Steps Did ClearPG Take?

• We were notified about the issue and checked for any sites that might be affected.
• For our managed hosting customers, we automatically updated the plugin to the latest version after verifying the vulnerability was fixed.

References:

• https://wordpress.org/documentation/wordpress-version/version-6-5-5/