Security Release: WordPress 5.2.1

WP Site Dr TeamUrgent Security Release

WordPress 5.2.1 is now available! This maintenance release fixes 33 bugs, including improvements to the block editor, accessibility, internationalization, and the Site Health feature introduced in 5.2.

WordPress 5.2.1 is a short-cycle maintenance release. Version 5.2.2 is expected to follow in approximately two weeks.

You can browse the full list of changes below:

Ticket Summary Owner Type Priority Component Version
#47180 Gutenberg typing issues in RTL since 5.2 iseulde defect (bug) high Editor 5.2
#47186 At least one function in /wp-includes/sodium_compat/src/Core32 times out on 32 bit servers paragoninitiativeenterprises defect (bug) high Upgrade/Install 5.2
#47244 wp_targeted_link_rel filter should not be applied to ‘Custom HTML` widget audrasjb defect (bug) high Widgets 5.2
#47284 Editor: Update packages for WordPress 5.2.1 aduth task (blessed) high Editor 5.2
#46316 wp_targeted_link_rel corrupts JSON content SergeyBiryukov defect (bug) normal Formatting 5.1
#46408 About: Use $display_version in headings SergeyBiryukov defect (bug) normal Help/About
#46937 Provide update-php link on WordPress update failure screen SergeyBiryukov enhancement normal Site Health 5.2
#46940 Site Health: Pseudo dashicons for list should be vertically centered desrosj defect (bug) normal Site Health 5.2
#46961 Privacy tool email field stretches past 100% on mobile desrosj defect (bug) normal Privacy 4.9.6
#46972 Cards on Tools page too wide on mobile desrosj defect (bug) normal Administration 4.2
#47020 jQuery Update 3.4.0 vulnerability azaozz defect (bug) normal External Libraries 5.1.1
#47063 Text not vertically centered on site-health.php desrosj defect (bug) normal Site Health 5.2
#47065 Skip links misplaced in the responsive view afercia defect (bug) normal Administration
#47106 Add aria-current attribute to current item in WP Admin <nav> tabs audrasjb defect (bug) normal Administration
#47159 Do not use placeholders for HTML tags in strings SergeyBiryukov defect (bug) normal I18N 5.2
#47161 Do not break strings to avoid HTML tags in them SergeyBiryukov defect (bug) normal I18N
#47169 Use a non-zero exit code when requirements are not met SergeyBiryukov defect (bug) normal Build/Test Tools 3.0
#47173 Nav Menus: Delete Menu action link is misaligned in responsive view audrasjb defect (bug) normal Menus 4.9
#47177 get_search_form function enhanced in 5.2 is not fully backward compatible SergeyBiryukov defect (bug) normal General 5.2
#47183 Console warning with Dashicons font and input type=”radio” desrosj defect (bug) normal Administration 5.2
#47185 Media files cannot be deleted under Windows since 5.2 SergeyBiryukov defect (bug) normal Filesystem API 5.2
#47189 Site Health: Plugins Upgrade Link for Multisite desrosj defect (bug) normal Site Health 5.2
#47205 Typing spaces stops working after two soft line breaks in Chrome. azaozz defect (bug) normal TinyMCE 5.2
#47229 Update TinyMCE to 4.9.4 azaozz task (blessed) normal TinyMCE
#47264 Wrong singular string in class-wp-site-health.php SergeyBiryukov defect (bug) normal Site Health 5.2
#47265 Uncaught Error: Call to undefined function load_default_textdomain() in /wp-includes/class-wp-fatal-error-handler.php:41 desrosj defect (bug) normal Site Health 5.2
#47294 5.2.1 About Page Updates desrosj task (blessed) normal Help/About
#47297 HTTP requests test in Site Health Status is not always correct SergeyBiryukov defect (bug) normal Site Health 5.2
#47304 Feed <lastBuildDate> Bug desrosj defect (bug) normal Feeds 5.2
#47312 Replace new “fixed %s bugs” string with a pre-existing one desrosj defect (bug) normal Help/About
#47323 Upgrading from WordPress 5.1 to 5.2.1 generates a fatal error SergeyBiryukov defect (bug) normal Upgrade/Install 5.2

Jonathan Desrosiers and William Earnhardt co-led this release, with contributions from 52 other contributors. Thank you to everyone that made this release possible!

Alex Dimitrov, Alex Shiels, Andrea Fercia, Andrew Duthie, Andrew Ozz, Andrey “Rarst” Savchenko, Andy Fragen, anischarolia, Birgir Erlendsson (birgire), chesio, Chetan Prajapati, daxelrod, Debabrata Karfa, Dima, Dion Hulse, Dominik Schilling, Ella van Durpe, Emil Dotsev, ghoul, Grzegorz (Greg) Ziółkowski, gwwar, Hareesh, Ian Belanger, imath, Jb Audras, Jeremy Felt, Joen Asmussen, Jonathan Desrosiers, Jonny Harris, Josepha, jrf, kjellr, Marius L. J., MikeNGarrett, Milan Dinić, Mukesh Panchal, onlanka, paragoninitiativeenterprises, parkcityj, Peter Wilson, Presskopp, Riad Benguella, Sergey Biryukov, Stephen Edgar, Sébastien SERRE, Thorsten Frommen, Tim Hengeveld, Timothy Jacobs, timph, TobiasBg, tonybogdanov, Tor-Bjorn Fjellner, William Earnhardt, and Yui.