This afternoon, the author received an email "Your site has been updated to WordPress 4.9.2" We learned that the WordPress development team has released the WordPress 4.9.2 security maintenance update. This update mainly fixes a flash security vulnerability and 22 other bugs since WordPress 4.9. It is recommended that WordPress users upgrade to the latest version as soon as possible.

An XSS security vulnerability was found in MediaElement's Flash rollback file, which was included in WordPress. Because in most cases, users no longer need Flash support, WordPress developers decided to delete this file in WordPress.

If you want to continue using Flash on the website and need to support the Flash function, MediaElement has released a WordPress plug-in that contains files that have fixed the above problems. You can download and install the plug-in.

In addition, WordPress 4.9.2 also fixes 22 other bugs, mainly including:

Fixed a JavaScript error that prevented saving articles in Firefox. Restored the previous get_category_link() and category_description(). When switching themes, try to restore the gadgets in the previous theme, even if there is no sidebar mapping.

More detailed publishing information can be viewed WordPress 4.9.2 release log (English).

New users can click here to download WordPress 4.9.2. Users who have installed WordPress can directly update to the latest version with one click through the management background. Important production websites must be backed up before updating to avoid accidents during the upgrade process.