On May 20, 2023, WordPress 6.2.2 was released to the public. The 6.2.2 minor release addresses 1 bug and 1 security issue. Because this is a security release, it is recommended that you update your sites immediately. All versions since WordPress 5.9 have also been updated.
The security team would like to thank the following people for responsibly reporting vulnerabilities and allowing them to be fixed in this release:
- Block themes parsing shortcodes in user-generated data; thanks to Liam Gladdy of WP Engine for reporting this issue.
The issue above was originally patched in the 6.2.1 release, but needed further hardening here in 6.2.2. The Core team is thankful for the community in their response to 6.2.1 and collaboration on finding the best path forward for proper resolution in 6.2.2.
Restored the work of some shortcodes that stopped working after the last 6.2.1 update.