WordPress 3.3.2 update release

Today I was announced in website admin that I have a new update, the WordPress 3.3.2 update. Before uploading an update, I search for the changes in the new version to see if there is something that could affect the website. This is the least you can do before upgrading to a new a version on WordPress.

WordPress 3.3.2 is a maintenance and security update and there are NO database changes (db_version in wp_options remained at 19470).

WordPress 3.3.2 Changes

External libraries included in WordPress received security updates:

• Plupload (version 1.5.4), which WordPress uses for uploading media.
• SWFUpload, which WordPress previously used for uploading media, and may still be in use by plugins.
• SWFObject, which WordPress previously used to embed Flash content, and may still be in use by plugins and themes.

WordPress 3.3.2 also addresses:

• Limited privilege escalation where a site administrator could deactivate network-wide plugins when running a WordPress network under particular circumstances.
• Cross-site scripting vulnerability when making URLs clickable.
• Cross-site scripting vulnerabilities in redirects after posting comments in older browsers, and when filtering URLs.

Here is the full log of the changes made for WordPress 3.3.2.