WordPress 4.5.3 Fixes 7 Security Issues ![rw-book-cover](https://149611589.v2.pressablecdn.com/wp-content/uploads/2015/03/security.jpg) ## Metadata - Author: [[Sarah Gooding]] - Full Title: WordPress 4.5.3 Fixes 7 Security Issues - Category: #articles - Summary: WordPress 4.5.3 was released today to fix seven important security issues that affect 4.5.2 and prior versions. Automatic background updates are already rolling out and all users are advised to update immediately. The release patches the following security issues: - URL: https://wptavern.com/wordpress-4-5-3-fixes-7-security-issues [![photo credit: Lock - (license)](https://149611589.v2.pressablecdn.com/wp-content/uploads/2015/03/security.jpg)](https://149611589.v2.pressablecdn.com/wp-content/uploads/2015/03/security.jpg)photo credit: Lock – (license) [WordPress 4.5.3](https://wordpress.org/news/2016/06/wordpress-4-5-3/) was released today to fix seven important security issues that affect 4.5.2 and prior versions. Automatic background updates are already rolling out and all users are advised to update immediately. The release patches the following security issues: * **Redirect bypass in the customizer** (reported by [Yassine Aboukir](http://yassineaboukir.com/)) * **Revision history information disclosure** (reported independently by [John Blackbourn](https://profiles.wordpress.org/johnbillion) from the WordPress security team and by Dan Moen) * **oEmbed denial of service** (reported by Jennifer Dodd from Automattic) * **Unauthorized category removal from a post** (reported by David Herrera from [Alley Interactive](https://www.alleyinteractive.com/)) * **Password change via stolen cookie** (reported by [Michael Adams](https://blogwaffe.com/) from the WordPress security team) * **Some less secure sanitize\_file\_name edge cases** (reported by [Peter Westwood](http://peter.westwood.name/) of the WordPress security team) A host of different companies and independent volunteers worked together to [responsibly disclose](https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/) and fix these issues to make WordPress more secure. The release also fixes 17 bugs from 4.5, 4.5.1 and 4.5.2. Rolling them all into one security and maintenance release means fewer updates for users. Check out the [release notes](https://codex.wordpress.org/Version_4.5.3) and [closed tickets](https://core.trac.wordpress.org/query?milestone=4.5.3) for a full list of fixes included in 4.5.3. ##### Share this:, WordPress 4.5.3 Fixes 7 Security Issues, Sarah Gooding, 01gnmcy151f44fxztkrsyp8nnh.