WordPress 4.7.5 Security Update

WordPress 4.7.5 was released on May 16 and is an update which fixes six security issues of version 4.7.4 and earlier.

The fixed security issues are:

1. Insufficient redirect validation in the HTTP class.
2. Improper handling of post meta data values in the XML-RPC API.
3. Lack of capability checks for post meta data in the XML-RPC API.
4. A Cross Site Request Forgery (CRSF)  vulnerability was discovered in the filesystem credentials dialog.
5. A cross-site scripting (XSS) vulnerability was discovered when attempting to upload very large files.
6. A cross-site scripting (XSS) vulnerability was discovered related to the Customizer.

The official list of all changes can be found here.

Remember to backup before installing updates and update soon.