Title: WordPress 6.4.2 Maintenance and Security Release Author: Mark Robson Published: 6 December 2023 --- English (UK) * [Themes](https://en-gb.wordpress.org/themes/) * [Plugins](https://en-gb.wordpress.org/plugins/) * [News](https://en-gb.wordpress.org/news/) * [About](https://en-gb.wordpress.org/about/) * [Support](https://en-gb.wordpress.org/support/) * [Patterns](https://en-gb.wordpress.org/patterns/) * [Get Involved](https://en-gb.wordpress.org/get-involved/) * [Translate](https://en-gb.wordpress.org/translations/) * [Team P2](https://en-gb.wordpress.org/team/) * [Get WordPress](https://en-gb.wordpress.org/download/) [ Get WordPress ](https://en-gb.wordpress.org/download/) [News](https://en-gb.wordpress.org/news/) WordPress 6.4.2 Maintenance and Security Release 6 December 2023 By [Mark Robson](https://profiles.wordpress.org/markscottrobson/) # WordPress 6.4.2 Maintenance and Security Release --- ## WordPress 6.4.2 is now available! This minor release features [7 bug fixes](https://core.trac.wordpress.org/query?status=closed&milestone=6.4.2&groupdesc=1&group=resolution&col=id&col=summary&col=status&col=milestone&col=owner&col=type&col=priority&col=keywords&order=priority) in Core. The fixes include a bug fix for an issue causing stylesheet and theme directories to sometimes return incorrect results. This release also features one security fix. Because this is a security release,** it is recommended that you update your sites immediately****.** You can [download WordPress 6.4.2 from WordPress.org](https://wordpress.org/wordpress-6.4.2.zip), or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have sites that support automatic background updates, the update process will begin automatically. WordPress 6.4.2 is a short-cycle release. The next major release will be version 6.5 released in early 2024. For more information on this release, please visit the [HelpHub site](https://wordpress.org/documentation/wordpress-version/version-6-4-2/). ## Security updates included in this release The security team addressed the following vulnerability in this release. * A Remote Code Execution vulnerability that is not directly exploitable in core, however the security team feels that there is a potential for high severity when combined with some plugins, especially in multisite installs. To help the security team and WordPressers around the world, you are encouraged to [responsibly report vulnerabilities](https://hackerone.com/wordpress?type=team). This allows vulnerabilities to be fixed in future releases. ## Thank you to these WordPress contributors This release was led by [Aaron Jorbin](https://profiles.wordpress.org/jorbin/). WordPress 6.4.2 would not have been possible without the contributions of the following people. Their asynchronous coordination to deliver maintenance and security fixes into a stable release is a testament to the power and capability of the WordPress community. [Aaron Jorbin](https://profiles.wordpress.org/jorbin), [Aki Hamano](https://profiles.wordpress.org/wildworks), [Akira Tachibana](https://profiles.wordpress.org/atachibana), [Alex Concha](https://profiles.wordpress.org/xknown), [Angela Jin](https://profiles.wordpress.org/angelasjin), [Anton Vlasenko](https://profiles.wordpress.org/antonvlasenko), [Barry](https://profiles.wordpress.org/barry), [bernhard-reiter](https://profiles.wordpress.org/Bernhard%20Reiter), [Caleb Burks](https://profiles.wordpress.org/icaleb), [Corey Worrell](https://profiles.wordpress.org/coreyw), [crstauf](https://profiles.wordpress.org/crstauf), [Darren Ethier (nerrad)](https://profiles.wordpress.org/nerrad), [David Baumwald](https://profiles.wordpress.org/davidbaumwald/), [Dennis Snell](https://profiles.wordpress.org/dmsnell), [Dion Hulse](https://profiles.wordpress.org/dd32), [Erik](https://profiles.wordpress.org/kebbet), [Fabian Todt](https://profiles.wordpress.org/gaambo), [Felix Arntz](https://profiles.wordpress.org/flixos90), [Héctor Prieto](https://profiles.wordpress.org/priethor), [ironprogrammer](https://profiles.wordpress.org/ironprogrammer), [Isabel Brison](https://profiles.wordpress.org/isabel_brison), [Jb Audras](https://profiles.wordpress.org/audrasjb), [Jeffrey Paul](https://profiles.wordpress.org/jeffpaul), [Jessica Lyschik](https://profiles.wordpress.org/luminuu), [Joe McGill](https://profiles.wordpress.org/joemcgill), [John Blackbourn](https://profiles.wordpress.org/johnbillion), [Jonathan Desrosiers](https://profiles.wordpress.org/desrosj/), [Kharis Sulistiyono](https://profiles.wordpress.org/kharisblank), [Krupal Panchal](https://profiles.wordpress.org/krupalpanchal), [Kylen Downs](https://profiles.wordpress.org/kdowns), [meta4](https://profiles.wordpress.org/meta4), [Mike Schroder](https://profiles.wordpress.org/mikeschroder), [Mukesh Panchal](https://profiles.wordpress.org/mukesh27), [partyfrikadelle](https://profiles.wordpress.org/partyfrikadelle), [Peter Wilson](https://profiles.wordpress.org/peterwilsoncc), [Pieterjan Deneys](https://profiles.wordpress.org/NekoJonez), [rawrly](https://profiles.wordpress.org/rawrly), [rebasaurus](https://profiles.wordpress.org/rebasaurus), [Sergey Biryukov](https://profiles.wordpress.org/SergeyBiryukov), [Tonya Mork](https://profiles.wordpress.org/hellofromTonya), [vortfu](https://profiles.wordpress.org/vortfu) ## How to contribute To get involved in WordPress core development, head over to Trac, [pick a ticket](https://core.trac.wordpress.org/report/6), and join the conversation in the [#core](https://wordpress.slack.com/archives/C02RQBWTW). Need help? Check out the [Core Contributor Handbook](https://make.wordpress.org/core/handbook/tutorials/faq-for-new-contributors/). As a final reminder, the WordPress Security Team will never email you requesting that you install a plugin or theme on your site, and will never ask for an administrator username and password. [Please stay vigilant against phishing attacks](https://wordpress.org/news/2023/12/alert-wordpress-security-team-impersonation-scams/). _Thanks to [@angelasjin](https://profiles.wordpress.org/angelasjin/) and [@desrosj](https://wordpress.slack.com/team/U02SVSW3U) for proofreading._ ### Share this: * [ Facebook ](https://en-gb.wordpress.org/2023/12/06/wordpress-6-4-2-maintenance-and-security-release/?share=facebook) * [ X ](https://en-gb.wordpress.org/2023/12/06/wordpress-6-4-2-maintenance-and-security-release/?share=twitter) * [ Email ](https://en-gb.wordpress.org/2023/12/06/wordpress-6-4-2-maintenance-and-security-release/?subject=%5BShared%20Post%5D%20WordPress%206.4.2%20Maintenance%20and%20Security%20Release&body=https%3A%2F%2Fen-gb.wordpress.org%2F2023%2F12%2F06%2Fwordpress-6-4-2-maintenance-and-security-release%2F&share=email) ### Leave a Reply 󠀁[Cancel reply](https://en-gb.wordpress.org/2023/12/06/wordpress-6-4-2-maintenance-and-security-release/?output_format=md#respond)󠁿 You must be [logged in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fen-gb.wordpress.org%2F2023%2F12%2F06%2Fwordpress-6-4-2-maintenance-and-security-release%2F&locale=en_GB) to post a comment. [Previous WordPress 5.9.2 Security and Maintenance Release](https://en-gb.wordpress.org/2022/03/11/wordpress-5-9-2-security-and-maintenance-release/) [Next WordPress 6.4.3 Maintenance and Security Release](https://en-gb.wordpress.org/2024/01/30/wordpress-6-4-3-maintenance-and-security-release/) ## Categories * [England](https://en-gb.wordpress.org/category/england/) (53) - [North East](https://en-gb.wordpress.org/category/england/north-east/) (5) - [North West](https://en-gb.wordpress.org/category/england/north-west/) (19) - [South East](https://en-gb.wordpress.org/category/england/south-east/) (21) * [London](https://en-gb.wordpress.org/category/england/south-east/london/)( 16) - [South West](https://en-gb.wordpress.org/category/england/south-west/) (8) * [FSE](https://en-gb.wordpress.org/category/fse/) (1) * [Housekeeping](https://en-gb.wordpress.org/category/housekeeping/) (1) * [Meetup](https://en-gb.wordpress.org/category/meetup/) (70) * [News](https://en-gb.wordpress.org/category/news/) (48) * [Releases](https://en-gb.wordpress.org/category/releases/) (27) * [Scotland](https://en-gb.wordpress.org/category/scotland/) (25) * [Security](https://en-gb.wordpress.org/category/security/) (11) * [Themes](https://en-gb.wordpress.org/category/themes/) (2) * [Wales](https://en-gb.wordpress.org/category/wales/) (1) * [WordCamp](https://en-gb.wordpress.org/category/wordcamp/) (5) ## Subscribe Type your email… * [About](https://en-gb.wordpress.org/about/) * [News](https://en-gb.wordpress.org/news/) * [Hosting](https://wordpress.org/hosting/) * [Privacy](https://en-gb.wordpress.org/about/privacy/) * [Showcase](https://wordpress.org/showcase/) * [Themes](https://en-gb.wordpress.org/themes/) * [Plugins](https://en-gb.wordpress.org/plugins/) * [Patterns](https://en-gb.wordpress.org/patterns/) * [Learn](https://learn.wordpress.org/?locale=en_GB) * [Support](https://wordpress.org/support/) * [Developers](https://developer.wordpress.org/) * [WordPress.tv ](https://wordpress.tv/) * [Get Involved](https://make.wordpress.org/) * [Events](https://events.wordpress.org/) * [Donate ](https://wordpressfoundation.org/donate/) * [Swag ](https://mercantile.wordpress.org/) * [WordPress.com ](https://wordpress.com/?ref=wporg-footer) * [Matt ](https://ma.tt/) * [bbPress ](https://bbpress.org/) * [BuddyPress ](https://buddypress.org/) [ English (UK) ](https://make.wordpress.org/polyglots/teams/?locale=en_GB) The WordPress® trademark is the intellectual property of the WordPress Foundation. * [Visit our X (formerly Twitter) account](https://www.x.com/WordPress) * [Visit our Bluesky account](https://bsky.app/profile/wordpress.org) * [Visit our Mastodon account](https://mastodon.world/@WordPress) * [Visit our Threads account](https://www.threads.net/@wordpress) * [Visit our Facebook page](https://www.facebook.com/WordPress/) * [Visit our Instagram account](https://www.instagram.com/wordpress/) * [Visit our LinkedIn account](https://www.linkedin.com/company/wordpress) * [Visit our TikTok account](https://www.tiktok.com/@wordpress) * [Visit our YouTube channel](https://www.youtube.com/wordpress) * [Visit our Tumblr account](https://wordpress.tumblr.com/)