WordPress 5.7.2 is now available.
This security update includes a single security fix. As this is a security release, we recommend you update your site immediately. All major WordPress versions since WordPress 3.7 have received security updates.
WordPress 5.7.2 is a short-cycle "security update" release. The next major release will be 5.8.
You can download and update to WordPress 5.7.2 from cn.WordPress.org, or visit your site’s Dashboard → Updates page and click Update Now.
If your site supports background auto-updates, the auto-update task may have already completed.
Security Updates
A security issue affects all WordPress versions between 3.7 and 5.7. If you have not updated to version 5.7, all major WordPress releases since 3.7 have had security updates to fix the following security issues:
- Object injection in PHPMailer, CVE-2020-36326, CVE-2018-19296.
Thanks to the WordPress security team members who contributed fixes for the WordPress open source project.
For more information, please refer to the 5.7.2 version HelpHub documentation page.
Credits and Thanks!
Version 5.7.2 was led by @peterwilsoncc and @audrasjb.
Thanks to all community members who helped make WordPress 5.7.2 a success. @audrasjb, @ayeshrajans, @desrosj, @dd32, @peterwilsoncc, @SergeyBiryukov, and @xknown.
This is a discussion thread split from the original post at https://cn.wordpress.org/2021/05/13/wordpress-5-7-2/