{"id":613,"date":"2026-03-11T15:34:58","date_gmt":"2026-03-11T15:34:58","guid":{"rendered":"https:\/\/xn--mnchen-3ya.xyz\/index.php\/2026\/03\/11\/wordpress-org-blog-wordpress-6-9-4-release\/"},"modified":"2026-03-11T15:34:58","modified_gmt":"2026-03-11T15:34:58","slug":"wordpress-org-blog-wordpress-6-9-4-release","status":"publish","type":"post","link":"https:\/\/xn--mnchen-3ya.xyz\/index.php\/2026\/03\/11\/wordpress-org-blog-wordpress-6-9-4-release\/","title":{"rendered":"WordPress.org blog: WordPress 6.9.4 Release"},"content":{"rendered":"<h2 class=\"wp-block-heading\">WordPress 6.9.4 is now available!<\/h2>\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/wordpress.org\/news\/2026\/03\/wordpress-6-9-2-release\/\">WordPress 6.9.2<\/a> and <a href=\"https:\/\/wordpress.org\/news\/2026\/03\/wordpress-6-9-3-and-7-0-beta-4\/\">WordPress 6.9.3<\/a> were released yesterday, addressing 10 security issues and a bug that affected template file loading on a limited number of sites.<\/p>\n<p class=\"wp-block-paragraph\">The WordPress Security Team has discovered that not all of the security fixes were fully applied, therefore 6.9.4 has been released containing the necessary additional fixes.<\/p>\n<p class=\"wp-block-paragraph\">Because this is a security release,<strong> it is recommended that you update your sites immediately<\/strong>.<\/p>\n<p class=\"wp-block-paragraph\">You can <a href=\"https:\/\/wordpress.org\/wordpress-6.9.4.zip\">download WordPress 6.9.4 from WordPress.org<\/a>, or visit your WordPress Dashboard, click \u201cUpdates\u201d, and then click \u201cUpdate Now\u201d. If you have sites that support automatic background updates, the update process will begin automatically.<\/p>\n<p class=\"wp-block-paragraph\">For more information on WordPress 6.9.4, please visit the <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-9-4\/\">version page on the HelpHub site<\/a>.<\/p>\n<h2 class=\"wp-block-heading\">Security updates included in this release<\/h2>\n<p class=\"wp-block-paragraph\">The security team would like to thank the contributors who reported and investigated this issue, in particular <a href=\"https:\/\/profiles.wordpress.org\/kraftner\">Thomas Kr\u00e4ftner<\/a> for his responsible disclosure. The security issues that are resolved in 6.9.4 are:<\/p>\n<ul class=\"wp-block-list\">\n<li>A PclZip path traversal issue reported independently by <a href=\"https:\/\/profiles.wordpress.org\/francescocarlucci\/\">Francesco Carlucci<\/a> and <a href=\"https:\/\/profiles.wordpress.org\/kaminuma\/\">kaminuma<\/a><\/li>\n<li>An authorization bypass on the Notes feature reported by <a href=\"https:\/\/profiles.wordpress.org\/kaminuma\/\">kaminuma<\/a><\/li>\n<li>An XXE in the external getID3 library reported by <a href=\"https:\/\/profiles.wordpress.org\/regex33\/\">Youssef Achtatal<\/a><\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>WordPress 6.9.4 is now available! WordPress 6.9.2 and WordPress 6.9.3 were released yesterday, addressing 10 security issues and a bug that affected template file loading on a limited number of sites. The WordPress Security Team has discovered that not all of the security fixes were fully applied, therefore 6.9.4 has been released containing the necessary [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-613","post","type-post","status-publish","format-standard","hentry","category-blog"],"_links":{"self":[{"href":"https:\/\/xn--mnchen-3ya.xyz\/index.php\/wp-json\/wp\/v2\/posts\/613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xn--mnchen-3ya.xyz\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xn--mnchen-3ya.xyz\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xn--mnchen-3ya.xyz\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/xn--mnchen-3ya.xyz\/index.php\/wp-json\/wp\/v2\/comments?post=613"}],"version-history":[{"count":0,"href":"https:\/\/xn--mnchen-3ya.xyz\/index.php\/wp-json\/wp\/v2\/posts\/613\/revisions"}],"wp:attachment":[{"href":"https:\/\/xn--mnchen-3ya.xyz\/index.php\/wp-json\/wp\/v2\/media?parent=613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xn--mnchen-3ya.xyz\/index.php\/wp-json\/wp\/v2\/categories?post=613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xn--mnchen-3ya.xyz\/index.php\/wp-json\/wp\/v2\/tags?post=613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}