On May 16, 2023, WordPress version 6.2.1 was released, which fixes 5 security vulnerabilities, as well as 20 bugs in the core and 10 bugs in the block editor. One of these vulnerabilities affected shortcodes in block themes that could be used (even without warning) to infect a website with malicious code. To address this issue, the WordPress security team quickly disabled shortcodes in block themes with the release of WordPress 6.2.1.
After many reports of sites being partially destroyed and/or plugins partially no longer working (such as Contact Form 7 or Breadcrumbs from Rank Math SEO), the WordPress editor and WordPress security team were looking for a viable solution until today. With today’s (May 20, 2023) release of WordPress 6.2.2, the issue with shortcodes has apparently been fixed, and another bug has been fixed.
The security updates address five security vulnerabilities in all versions of WordPress starting from 4.1.x, and a timely upgrade is highly recommended (upgrade to WordPress 6.2.2 for WordPress. 6.2.x branch). As announced a few weeks ago, versions 3.7 to 4.0 will no longer receive any security updates, unlike before.
WordPress 6.2.2 is a minor release, the upcoming major release is WordPress 6.3, which is scheduled for August 8, 2023 (guide). Download WordPress 6.2.2 to install or go to Dashboard → Updates and click Update Now. Sites that support automatic background updates already start updating automatically.
You can find detailed information about security updates and bug fixes on the Helphub pages: 6.2.2 and 6.2.1.
Supporters of version 6.2.2
Graduation Chair: Jonathan Desrosiers
Aaron Jorbin, Alex Concha, Anthony Burchell, Chloe Bringman, chriscct7, Daniel Richards, David Baumwald, Ehtisham S., Greg Ziolkowski, Isabel Brisson, Jb Odras, Jeffrey Paul, John Blackbourne, Jonathan Desrosiers, Josepha, Marius LJ, Matthias Ventur Mike Schroder, Peter Wilson, Riad Benguella, Robert Anderson, Ryan McCue, Samuel Wood (Otto), Scott Reilly, and Timothy Jacobs.
Supporters of version 6.2.1
Graduation Leaders: Jb Audras, George Mamadashvili, Sergey Biryukov and Peter Wilson.
Adam Silverstein, Aki Hamano, amine, Andrew Oz, Andrew Serong, Andre, Ari Statopoulos, Birgitta Pauli-Hack, Shiraga Rathod, Colin Stewart, Daniel Richards, David Baumwald, David Binovec, Dennis Snell, devshagor, Dhrumil Kumbhani, Dominic Ella, George Mamadashvili, Isabel Brisson, Jb Audras, Joe Dolson, John A., John Blackbourn, Jonathan Desrosiers, Juanma Garrido, Juliet Reynders Follmer, Kai Hao, Kylie (trepmal), Marcis, Marine EVAIN, Matt Wiebe, Mukesh Panchal, Hubb, niks diego, nickpap, nik cekuras, pavan patil, Peteris Wilson, pouicpouic, riad benguella, ryan wech, scott reilly, sergey biryukov, Stephen Bernhardt, tmatsuur, tobiasbg, tonya mork, westonladter, and, westonladter,