Skip to content

3.4.1 - 2026-07-27

Latest
Latest

Choose a tag to compare

View all tags
@jrfnl jrfnl released this 27 Jul 11:55
Immutable release. Only release title and notes can be modified.
3.4.1
ec2ff94
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This is a security release and all users are advised to update their WordPressCS install as soon as possible.

Changed

  • The minimum required PHPCSUtils version to 1.2.3 (was 1.2.2). #2770
  • The minimum required PHPCSExtra version to 1.5.1 (was 1.5.0). #2770
  • Various housekeeping, including documentation improvements.

Fixed

  • SECURITY FIX: Running the WordPress.WP.EnqueuedResourceParameters sniff over untrusted PHP code, for example, in a CI pipeline that lints pull requests, or on a developer machine reviewing third-party code, could lead to arbitrary command execution on the scanning host. #2771
    This affects users of the WordPress and WordPress-Extra rulesets. The WordPress-Core ruleset and the WordPress-Docs ruleset are not affected.
    For more details, see the security advisory
    Thanks to @FORIMOC for responsibly disclosing the vulnerability.

Contributors

FORIMOC
Assets 3
Loading