Not Ready For WordPress 5 But You Still Need Security Updates For The WordPress 4

WordPress Auto Updates

A few days after the WordPress 5.0 release, the first security update (5.0.1) has been released which resolves vulnerabilities found in all previous versions of WordPress starting with 3.7. These vulnerabilities allow authors to alter metadata and delete files that they weren’t authorized to. Also, authors could create posts of unauthorized post types with specially crafted input which could be used to take over a site…

WordPress team strongly suggests updating your sites immediately if you haven’t done so already…

If you previously updated your sites to WordPress 5.0, you can easily update to 5.0.1 and you have nothing to worry about, however, what if you are still not ready for the WordPress 5.0 you still need to install this security update. Don’t worry, the WordPress team released this security update for the WordPress 4 branch so you can update your sites to version 4.9.9.

By default, WordPress Core is set to automatically update minor updates. This means that your WordPress 4.9.x websites should automatically update to 4.9.9. But if for any reason, automatic updates are not enabled on your websites, and you can’t update your sites as you normally would, you need to enable the Auto-update feature on your sites by inserting the following code line into the wp-config.php file

define( 'WP_AUTO_UPDATE_CORE', 'minor' );

Here you can find more about the WordPress Core auto updates.

Enable Automatic Update For Minor Updates in Bulk

If you manage multiple WordPress sites, the easiest way to make sure that the Minor updates will be processed automatically is to use the MainWP Code Snippets Extension to define the constant.

WordPress Enable Minor Updates

To do this,

  1. Login to your MainWP Dashboard
  2. Go to the Code Snippets Extension
  3. Create a New Snippet
    1. Set the Snippet Title
    2. Set the Snippet Description
    3. Make sure that the Snippet Type is set to This Code Snippet goes to the wp-config.php file
    4. Paste define( 'WP_AUTO_UPDATE_CORE', 'minor' ); to the code editor field
    5. Select your sites
  4. Click the Run Snippet button

That is it. After some time, your WordPress installs will automatically update to 4.9.9.


Special thanks to Rajendra Zore for bringing our attention to this topic in the MainWP User Group.

1 thought on “Not Ready For WordPress 5 But You Still Need Security Updates For The WordPress 4”

  1. 5.0.1 and 4.9.9 both cause an issue in WooCommerce product CSV imports, due to the security change. So WordPress 5.0.2 will fix the issue which is released 19th December, or the issue will be fixed in WooCommerce 3.5.2. The temp fix is to rename CSV files that need to be imported to TXT file extension, then the issue will not happen.

Comments are closed.

Looking for something?

Privacy laws apply to businesses that collect personal information. Since no personal information is collected by the MainWP plugins, no privacy laws apply to the MainWP plugins. This includes GDPR, UK DPA 2018, PIPEDA, Australia Privacy Act 1988, LGPD, PIPL, and other privacy laws.
Donata Stroink-Skillrud
Donata Stroink-Skillrud
President of Agency Attorneys