{"id":424,"date":"2013-09-12T08:49:34","date_gmt":"2013-09-12T00:49:34","guid":{"rendered":"http:\/\/lesterchan.net\/wordpress\/?p=424"},"modified":"2013-11-28T12:19:31","modified_gmt":"2013-11-28T04:19:31","slug":"wordpress-3-6-1","status":"publish","type":"post","link":"https:\/\/lesterchan.net\/wordpress\/2013\/09\/12\/wordpress-3-6-1\/","title":{"rendered":"WordPress 3.6.1"},"content":{"rendered":"<p><a href=\"http:\/\/wordpress.org\/news\/2013\/09\/wordpress-3-6-1\/\">WordPress 3.6.1<\/a> has been release. This is a maintenance and security release, so please upgrade as soon as you get the chance.<\/p>\n<p>This .1 release fixes <a href=\"http:\/\/core.trac.wordpress.org\/query?status=closed&#038;group=resolution&#038;milestone=3.6.1\">13 bugs<\/a> and the below security issues:<\/p>\n<ul>\n<li>Block unsafe PHP unserialization that could occur in limited situations and setups, which can lead to remote code execution. Reported by <a href=\"http:\/\/vagosec.org\/\" rel=\"nofollow\">Tom Van Goethem<\/a>.<\/li>\n<li>Prevent a user with an Author role, using a specially crafted request, from being able to create a post \u201cwritten by\u201d another user. Reported by <a href=\"http:\/\/anakornk.wordpress.com\/\" rel=\"nofollow\">Anakorn Kyavatanakij<\/a>.<\/li>\n<li>Fix insufficient input validation that could result in redirecting or leading a user to another website. Reported by Dave Cummo, a Northrup Grumman subcontractor for the <a href=\"http:\/\/www.cdc.gov\/\" rel=\"nofollow\">U.S. Centers for Disease Control and Prevention<\/a>.<\/li>\n<li>Additionally, we\u2019ve adjusted security restrictions around file uploads to mitigate the potential for cross-site scripting.<\/li>\n<\/ul>\n<p>Download: <a href=\"http:\/\/wordpress.org\/wordpress-3.6.1.zip\">WordPress 3.6.1<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>WordPress 3.6.1 has been release. This is a maintenance and security release, so please upgrade as soon as you get the chance. This .1 release fixes 13 bugs and the below security issues: Block unsafe PHP unserialization that could occur in limited situations and setups, which can lead to remote code execution. Reported by Tom &hellip; <a href=\"https:\/\/lesterchan.net\/wordpress\/2013\/09\/12\/wordpress-3-6-1\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;WordPress 3.6.1&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[142,28],"class_list":["post-424","post","type-post","status-publish","format-standard","hentry","category-wordpress","tag-3-6","tag-release"],"views":32664,"_links":{"self":[{"href":"https:\/\/lesterchan.net\/wordpress\/wp-json\/wp\/v2\/posts\/424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lesterchan.net\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lesterchan.net\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lesterchan.net\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lesterchan.net\/wordpress\/wp-json\/wp\/v2\/comments?post=424"}],"version-history":[{"count":0,"href":"https:\/\/lesterchan.net\/wordpress\/wp-json\/wp\/v2\/posts\/424\/revisions"}],"wp:attachment":[{"href":"https:\/\/lesterchan.net\/wordpress\/wp-json\/wp\/v2\/media?parent=424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lesterchan.net\/wordpress\/wp-json\/wp\/v2\/categories?post=424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lesterchan.net\/wordpress\/wp-json\/wp\/v2\/tags?post=424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}