WPBeginner

Beginner's Guide for WordPress

  • Blog
    • Beginners Guide
    • News
    • Opinion
    • Showcase
    • Themes
    • Tutorials
    • WordPress Plugins
  • Start Here
    • How to Start a Blog
    • Create a Website
    • Start an Online Store
    • Best Website Builder
    • Email Marketing
    • WordPress Hosting
    • Business Name Ideas
  • Deals
    • Bluehost Coupon
    • SiteGround Coupon
    • WP Engine Coupon
    • HostGator Coupon
    • Domain.com Coupon
    • Constant Contact
    • View All Deals »
  • Glossary
  • Videos
  • Products
X
☰
Beginner's Guide for WordPress / Start your WordPress Blog in minutes
Choosing the Best
WordPress Hosting
How to Easily
Install WordPress
Recommended
WordPress Plugins
View all Guides

WPBeginner» Blog» News» WordPress 3.5.2 – Maintenance and Security Release

WordPress 3.5.2 – Maintenance and Security Release

Last updated on June 21st, 2013 by Editorial Staff
81 Shares
Share
Tweet
Share
Pin
Free WordPress Video Tutorials on YouTube by WPBeginner
WordPress 3.5.2 – Maintenance and Security Release

It’s Friday and work day is almost over here on the East coast of U.S, but we are still here updating all of our WordPress sites as we write this. The WordPress team have released WordPress 3.5.2, maintenance and security update. In this release, the WordPress security team resolved seven security issues, and added additional security hardening. We strongly recommend that you upgrade your WordPress sites right away.

The security fixes in WordPress 3.5.2 includes:

  • Blocking server-side request forgery attacks, which could potentially enable an attacker to gain access to a site.
  • Disallow contributors from improperly publishing posts or reassigning the post’s authorship.
  • An update to the SWFUpload external library to fix cross-site scripting vulnerabilities.
  • Prevention of a denial of service attack, affecting sites using password-protected posts.
  • An update to an external TinyMCE library to fix a cross-site scripting vulnerability.
  • Multiple fixes for cross-site scripting.
  • Avoid disclosing a full file path when a upload fails.

Upgrade to WordPress 3.5.2. Go to your Dashboard » Updates and do it with 1 click.

81 Shares
Share
Tweet
Share
Pin
Popular on WPBeginner Right Now!
  • Checklist

    Checklist: 15 Things You MUST DO Before Changing WordPress Themes

  • Revealed: Why Building an Email List is so Important Today (6 Reasons)

    Revealed: Why Building an Email List is so Important Today (6 Reasons)

  • How to Properly Move Your Blog from WordPress.com to WordPress.org

  • Google Analytics in WordPress

    How to Install Google Analytics in WordPress for Beginners

About the Editorial Staff

Editorial Staff at WPBeginner is a team of WordPress experts led by Syed Balkhi. Trusted by over 1.3 million readers worldwide.

The Ultimate WordPress Toolkit

20 Comments

Leave a Reply
  1. Adnan Fasih says:
    Jul 12, 2013 at 3:06 am

    There are so many issues in 3.5.2 update. Admin panel is disappearing; I had to manually fix the wp-admin folder from FTP. This is disappointing first 3.5.2 contains multiple issues and now 3.6 is further delayed. :(

    Reply
  2. Gautam Thapar says:
    Jun 25, 2013 at 10:12 am

    There seems to be some changes related to date format as well. First of all I noticed it in google webmaster tools which displayed error related to sitemap date. I use sitemap generated through WordPress SEO by Yoast.

    Then I noticed it in my custom post type backend where the list of posts use to display in this format – ‘2013/06/17 Published’ but now after the update it is displaying in the format which I use for the frontend – ‘1 hour ago Published’. :(

    Reply
  3. Len Printz says:
    Jun 24, 2013 at 11:51 am

    Hi guys! We updated to 3.5.2 and now our media library isn’t functioning properly…when trying to post an image to a page, we don’t see any of our images in the library and, also, our Nivo slider just chugs and we can’t manage that either!

    Any ideas would be MOST appreciated!

    Thanks so much!

    Reply
  4. Stark says:
    Jun 24, 2013 at 8:58 am

    Good to know, thanks so much.

    Reply
  5. Claire says:
    Jun 23, 2013 at 9:31 pm

    Upgrade appears to have worked beautifully! Thanks much.

    Reply
  6. Joseph says:
    Jun 23, 2013 at 11:23 am

    Fine for me! Everything worked just fine. I have two sites with different themes and both had no issues with the update.

    Reply
  7. Terence says:
    Jun 23, 2013 at 9:28 am

    I am always grateful for all the work the guys do behind the scenes keeping my site safe. But this really was the worst experience I have had with an update in all the years I have worked with WordPress, and from what I can see in the WordPress forums I am not the only one.

    In the end I had to disconnect my CDN and remove all my security and deactivate every plugin, only then would it install.

    Be very VERY careful with 3.5.2 and as you should do anyway, be sure to take a complete backup (website and SQL), before trying to install this update.

    Terence.

    Reply
    • Editorial Staff says:
      Jun 23, 2013 at 9:56 am

      That is rather strange Terence. Our WordPress 3.5.2 update worked just fine. We did have an issue where caching stopped, but that was due to an update of another plugin “WordPress SEO by Yoast”, but he was very quick to roll out another update with fixes.

      Reply
      • Terence says:
        Jun 23, 2013 at 10:02 am

        Which just goes to show how no two sites are alike, except superficially.

        The one problem I didn’t have a problem with ~ at least nothing to do with 3.5.2 ~ was Joost’s.

        Reply
      • Terence says:
        Jun 23, 2013 at 10:07 am

        Ooops! I take that back… WP SEO is now showing a red banner and claiming I have to remove `<meta name="description" content="” />` from my theme, and it then offers to fix it for me automagically, but although it offers, it doesn’t work.

        Reply
        • Editorial Staff says:
          Jun 23, 2013 at 10:14 am

          Well you shouldn’t have meta description tag in your theme if you are using WordPress SEO by Yoast.

  8. Tony says:
    Jun 23, 2013 at 2:33 am

    Thanks for letting me know.

    Reply
  9. Mary says:
    Jun 22, 2013 at 1:04 pm

    Thank you for this awesome rundown.

    I do tend to “shake in the knees” whenever I update anything. Of course, I do it antway!!!
    I have lost headers and footers. I hope it doesnt happen with a WP update.

    Nonetheless, the WordPress team is truly amazing.

    I really like your site alot. You cover so many important topics and you do it well!

    Thank you! Mary

    Reply
    • Editorial Staff says:
      Jun 23, 2013 at 9:56 am

      Thank you for the very kind words Mary. We really appreciate your support.

      Reply
  10. kurtis says:
    Jun 22, 2013 at 11:30 am

    being new to wordpress and your site…. is there proper things I should before I update? I read BACKUP, deactivate all plugins and then update. Is the the correct thing to do? can you please steer me in the right direction… I am in the middle of building a huge ecommerce site with woocommerce and I don’t want to loose or affect anything I am currently working on. I have woodojo launchpad enable during this build

    thank you! I love your blog!

    would love to see more info on e commerce like SEO, builds etc just an idea for you ;)

    Reply
    • Editorial Staff says:
      Jul 18, 2013 at 9:53 am

      Having a regular backup is necessary. We use a paid service VaultPress by Automattic to handle our real-time backup. We simply click on the one-click update and it works.

      Reply
  11. Keith Davis says:
    Jun 22, 2013 at 9:22 am

    Thanks guys
    All sites now updated and looking good.
    Love the WordPress one-click update.

    Reply
  12. iAn says:
    Jun 22, 2013 at 9:20 am

    I am done updating with my membership sites but there is this strange activity happening – I keep on receiving spam registrations…i am using si captcha for security…i have disabled the registrations for the moment.

    Reply
  13. Anmol Makkar says:
    Jun 22, 2013 at 5:17 am

    Does it changes, any edits I’ve made to themes and plugins in PHP editor?

    Reply
    • Editorial Staff says:
      Jun 22, 2013 at 7:37 am

      No

      Reply

Leave a Reply Cancel reply

Thanks for choosing to leave a comment. Please keep in mind that all comments are moderated according to our comment policy, and your email address will NOT be published. Please Do NOT use keywords in the name field. Let's have a personal and meaningful conversation.

Over 1,320,000+ Readers

Get fresh content from WPBeginner

Featured WordPress Plugin
MonsterInsights
MonsterInsights
Google Analytics made easy for WordPress. Learn More »
How to Start a Blog How to Start a Blog
I need help with ...
Starting a
Blog
WordPress
Performance
WordPress
Security
WordPress
SEO
WordPress
Errors
Building an
Online Store
Useful WordPress Guides
    • 7 Best WordPress Backup Plugins Compared (Pros and Cons)
    • How to Fix the Error Establishing a Database Connection in WordPress
    • Why You Need a CDN for your WordPress Blog? [Infographic]
    • 30 Legit Ways to Make Money Online Blogging with WordPress
    • Self Hosted WordPress.org vs. Free WordPress.com [Infograph]
    • Free Recording: WordPress Workshop for Beginners
    • 24 Must Have WordPress Plugins for Business Websites
    • How to Properly Move Your Blog from WordPress.com to WordPress.org
    • 5 Best Contact Form Plugins for WordPress Compared
    • Which is the Best WordPress Popup Plugin? (Comparison)
    • Best WooCommerce Hosting in 2021 (Comparison)
    • How to Fix the Internal Server Error in WordPress
    • How to Install WordPress - Complete WordPress Installation Tutorial
    • Why You Should Start Building an Email List Right Away
    • How to Properly Move WordPress to a New Domain Without Losing SEO
    • How to Choose the Best WordPress Hosting for Your Website
    • How to Choose the Best Blogging Platform (Comparison)
    • WordPress Tutorials - 200+ Step by Step WordPress Tutorials
    • 5 Best WordPress Ecommerce Plugins Compared
    • 5 Best WordPress Membership Plugins (Compared)
    • 7 Best Email Marketing Services for Small Business (2021)
    • How to Choose the Best Domain Registrar (Compared)
    • The Truth About Shared WordPress Web Hosting
    • When Do You Really Need Managed WordPress Hosting?
    • 5 Best Drag and Drop WordPress Page Builders Compared
    • How to Switch from Blogger to WordPress without Losing Google Rankings
    • How to Properly Switch From Wix to WordPress (Step by Step)
    • How to Properly Move from Weebly to WordPress (Step by Step)
    • Do You Really Need a VPS? Best WordPress VPS Hosting Compared
    • How to Properly Move from Squarespace to WordPress
    • How to Register a Domain Name (+ tip to get it for FREE)
    • HostGator Review - An Honest Look at Speed & Uptime (2021)
    • SiteGround Reviews from 4464 Users & Our Experts (2021)
    • Bluehost Review from Real Users + Performance Stats (2021)
    • How Much Does It Really Cost to Build a WordPress Website?
    • How to Create an Email Newsletter the RIGHT WAY (Step by Step)
    • Free Business Name Generator (A.I Powered)
    • How to Create a Free Business Email Address in 5 Minutes (Step by Step)
    • How to Install Google Analytics in WordPress for Beginners
    • How to Move WordPress to a New Host or Server With No Downtime
    • Why is WordPress Free? What are the Costs? What is the Catch?
    • How to Make a Website in 2021 – Step by Step Guide
Deals & Coupons (view all)
EWWW Image Optimizer
EWWW Image Optimizer Coupon
Get 15% OFF on EWWW Image Optimizer WordPress plugin for image resizing.
LiveChat logo
LiveChat Inc Coupon
Get a 30 day free trial and 30% OFF LiveChat, one of the best live chat service providers for WordPress users.
Featured In
About WPBeginner®

WPBeginner is a free WordPress resource site for Beginners. WPBeginner was founded in July 2009 by Syed Balkhi. The main goal of this site is to provide quality tips, tricks, hacks, and other WordPress resources that allows WordPress beginners to improve their site(s).

Join our team: We are Hiring!

Site Links
  • About Us
  • Contact Us
  • FTC Disclosure
  • Privacy Policy
  • Terms of Service
  • Free Blog Setup
  • Free Business Tools
  • Growth Fund
Our Sites
  • OptinMonster
  • MonsterInsights
  • WPForms
  • SeedProd
  • Nameboy
  • RafflePress
  • Smash Balloon
  • AIOSEO

Copyright © 2009 - 2021 WPBeginner LLC. All Rights Reserved. WPBeginner® is a registered trademark.

Managed by Awesome Motive | WordPress hosting by SiteGround | WordPress Security by Sucuri.