--- title: WordPress Fixes Security Issues With 5.0.1 Release description: WordPress Fixes Security Issues With 5.0.1 Release image: https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/GettyImages-922649082.jpg --- [Skip to the main content.](https://ontimetech.valeonetworks.com/blog/wordpress-fixes-security-issues-with-5-0-1-release#main-content) [![OTT powerd by VN big](https://ontimetech.valeonetworks.com/hs-fs/hubfs/OTT%20powerd%20by%20VN%20big.png?width=500&height=175&name=OTT%20powerd%20by%20VN%20big.png "OTT powerd by VN big")](https://ontimetech.valeonetworks.com) [![OTT powerd by VN big](https://ontimetech.valeonetworks.com/hs-fs/hubfs/OTT%20powerd%20by%20VN%20big.png?width=500&height=175&name=OTT%20powerd%20by%20VN%20big.png "OTT powerd by VN big")](https://ontimetech.valeonetworks.com) - [Services](https://ontimetech.valeonetworks.com/our-services/) - [Managed It Services](https://ontimetech.valeonetworks.com/our-services/managed-it/) - [Cybersecurity](https://ontimetech.valeonetworks.com/our-services/cybersecurity/) - [Cloud Solutions](https://ontimetech.valeonetworks.com/our-services/cloud-solutions/) - [Compliance](https://ontimetech.valeonetworks.com/our-services/compliance/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources](https://ontimetech.valeonetworks.com/resources/) - [Blog](https://ontimetech.valeonetworks.com/blog) - [About](https://ontimetech.valeonetworks.com/about/) - [Client Testimonials](https://ontimetech.valeonetworks.com/testimonials/) [415-294-5250](tel:4152945250) [Client Portal](https://portal.Valeonetworks.com) Toggle Menu Toggle Menu [415-294-5250](tel:4152945250) [Client Portal](https://portal.Valeonetworks.com) - [Services *Toggle Menu*](https://ontimetech.valeonetworks.com/our-services/) - [Managed It Services](https://ontimetech.valeonetworks.com/our-services/managed-it/) - [Cybersecurity](https://ontimetech.valeonetworks.com/our-services/cybersecurity/) - [Cloud Solutions](https://ontimetech.valeonetworks.com/our-services/cloud-solutions/) - [Compliance](https://ontimetech.valeonetworks.com/our-services/compliance/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources *Toggle Menu*](https://ontimetech.valeonetworks.com/resources/) - [Blog](https://ontimetech.valeonetworks.com/blog) - [About *Toggle Menu*](https://ontimetech.valeonetworks.com/about/) - [Client Testimonials](https://ontimetech.valeonetworks.com/testimonials/) - Example Link - Example Link - Example Link [*Facebook*](https://ontimetech.valeonetworks.com/blog/wordpress-fixes-security-issues-with-5-0-1-release#0) [*Instagram*](https://ontimetech.valeonetworks.com/blog/wordpress-fixes-security-issues-with-5-0-1-release#0) [*LinkedIn*](https://ontimetech.valeonetworks.com/blog/wordpress-fixes-security-issues-with-5-0-1-release#0) [*Twitter*](https://ontimetech.valeonetworks.com/blog/wordpress-fixes-security-issues-with-5-0-1-release#0) [*Youtube*](https://ontimetech.valeonetworks.com/blog/wordpress-fixes-security-issues-with-5-0-1-release#0) [*Medium*](https://ontimetech.valeonetworks.com/blog/wordpress-fixes-security-issues-with-5-0-1-release#0) 1 min read # WordPress Fixes Security Issues With 5.0.1 Release [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : Dec 18, 2018, 5:08:24 PM [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) In the first week of December 2018, WordPress announced the release of its much-awaited update WordPress 5.0. Researchers testing the new version almost immediately found several serious security issues which jeopardized sensitive personal data like user email addresses and passwords and allowed unauthorized access to content management functions on sites within the platform. All versions of the platform 5.0 and older were affected by the vulnerabilities. ![Wordpress 5.0.1](https://ontimetech.valeonetworks.com/hs-fs/hubfs/Blog%20Images/Imported_Blog_Media/GettyImages-922649082.jpg?width=509&height=339&name=GettyImages-922649082.jpg) Less than a week later, on December 12th, company developers responded with the release of WordPress 5.0.1, a patch intended to address the vulnerabilities in the earlier version. The bug that allowed access to emails and passwords by exploiting the Google website indexing service was only a threat to users who had not changed their passwords after the release of WordPress 5.0. The new version fixes that bug. Changes were made to the MIME validation process after security researchers discovered that an attacker working through Apache-hosted sites could create modified files to bypass the validation process and implement cross-site scripting hacks. Ian Dunn, a WordPress developer, state, “ Before 5.0.1, WordPress did not require uploaded files to pass MIME type verification so files could be uploaded even if the contents didn’t match the file extension. For example, a binary file could be uploaded with a .jpg extension. This is no longer the case, and the content of uploaded files must now match their extension. Most valid files should be unaffected, but there may be cases when a file needs to be renamed to its correct extension”. The new version addresses other vulnerabilities such as the ability to alter metadata to delete files without authorization and to craft input that would allow the creation of unauthorized posts. A full list of vulnerabilities found and fixes implemented with WordPress 5.0.1 has been [published by the company](https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/). Those users with websites on WordPress 5.0 should [update to WordPress 5.0.1](https://wordpress.org/download/) as soon as they can. Those who have enabled automatic updates should already have the new version, but because of the types of vulnerabilities that were discovered, it is recommended they do it manually to be safe. Those who are still using older WordPress 4.X versions should [install 4.9.9](https://wordpress.org/download/releases/) as soon as possible. There have been reports of automatic updates not working for this version. Again, it should be done manually to make sure. - [Tweet](https://twitter.com/share) #### ![BusinessOwnerGuidetoM&A-1](https://ontimetech.valeonetworks.com/hs-fs/hubfs/BusinessOwnerGuidetoM%26A-1.png?width=303&height=209&name=BusinessOwnerGuidetoM%26A-1.png) #### Download our eBook*THE ULTIMATE ROADMAP TO CMMC COMPLIANCE* by filling out the form below! [![Cyber Criminals Are Actively Exploiting a WordPress Plugin Zero-Day](https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/GettyImages-689019766.jpg)](https://ontimetech.valeonetworks.com/blog/cyber-criminals-are-actively-exploiting-a-wordpress-plugin-zero-day) #### [Cyber Criminals Are Actively Exploiting a WordPress Plugin Zero-Day](https://ontimetech.valeonetworks.com/blog/cyber-criminals-are-actively-exploiting-a-wordpress-plugin-zero-day) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/lance-stone) : Jun 15, 2021, 12:48:00 PM Cyber Criminals Are Actively Exploiting a WordPress Plugin Zero-Day The Fancy Product Designer plugin — commonly used to configure visual products on... [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/cyber-criminals-are-actively-exploiting-a-wordpress-plugin-zero-day) #### [5 Rock Solid Reasons Why Your San Francisco CPA Firm Needs A Reliable IT Services Partner](https://ontimetech.valeonetworks.com/blog/it-services-cpa-firms) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : Sep 19, 2018, 10:08:56 PM CPA Firms Across The San Francisco Bay Area Are Turning To On Time Tech For All Their IT Support & IT Services Having proper IT services for CPA firms [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/it-services-cpa-firms) [![Security From The Cloud—The Prayers of Small & Medium Businesses Around The World Have Been Answered.](https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/466086473-1.jpg)](https://ontimetech.valeonetworks.com/blog/security-from-the-cloud-the-prayers-of-small-medium-businesses-around-the-world-have-been-answered) #### [Security From The Cloud—The Prayers of Small & Medium Businesses Around The World Have Been Answered.](https://ontimetech.valeonetworks.com/blog/security-from-the-cloud-the-prayers-of-small-medium-businesses-around-the-world-have-been-answered) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : May 12, 2014, 2:34:40 AM Cloud-based security is helping small- and medium-sized organizations (SMBs) better manage their security needs, and meet regulatory requirements... [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/security-from-the-cloud-the-prayers-of-small-medium-businesses-around-the-world-have-been-answered) ![OTT White logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/VN%20-%20Division%20Logos/OTT%20Logo/OTT%20White%20logo.png?width=524&height=140&name=OTT%20White%20logo.png)   ##### About About On Time Tech is an IT Support and Computer Services company serving California. We provide services to the areas in and around We know businesses like yours need technology support in order to run highly-effective organizations. Leverage pro-growth technology services for your company now. ##### Explore On Time Time Explore On Time Time - [Our Services](https://ontimetech.valeonetworks.com/our-services/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources](https://ontimetech.valeonetworks.com/resources/) - [About](https://ontimetech.valeonetworks.com/about/) - [Contact](https://ontimetech.valeonetworks.com/contact/) ##### Contact Contact **San Francisco:** 1717 Fifth Ave San Rafael, CA 94901 [415-294-5250](tel:4152945250) Business Hours: M-F: 8AM-9PM - [Privacy Policy](https://ontimetech.valeonetworks.com/privacy-policy/) © 2026 On Time Tech [*Facebook*](https://www.facebook.com/ontimetechsf/)[*Twitter*](https://twitter.com/on_time_tech?lang=en)[*LinkedIn*](https://www.linkedin.com/company/ontimetech/)[*YouTube*](https://www.youtube.com/channel/UCubqs9PU_WWF-RFhfK9xNpw) [![Alura White logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/VN%20-%20Division%20Logos/Alura%20White%20logo.png?width=295&height=115&name=Alura%20White%20logo.png)](https://alura.valeonetworks.com/) [![Next.I.T._White-Logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/Next.I.T._White-Logo.png?width=328&height=136&name=Next.I.T._White-Logo.png)](https://next-it.net/) [![White-OTT-Logo-1-768x253](https://ontimetech.valeonetworks.com/hs-fs/hubfs/White-OTT-Logo-1-768x253.png?width=313&height=103&name=White-OTT-Logo-1-768x253.png)](https://www.ontimetech.com/) [![Valeo-Logo-White (1)](https://ontimetech.valeonetworks.com/hs-fs/hubfs/Valeo-Logo-White%20(1).png?width=288&height=123&name=Valeo-Logo-White%20(1).png)](https://valeonetworks.com/) *Return to Top* ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Lance Stone", "url" : "https://ontimetech.valeonetworks.com/blog/author/ulisticadmin" }, "dateModified" : "2024-01-10T16:23:35.678Z", "datePublished" : "2018-12-18T22:08:24.000Z", "headline" : "WordPress Fixes Security Issues With 5.0.1 Release", "image" : [ "https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/GettyImages-922649082.jpg" ], "mainEntityOfPage" : { "@id" : "https://ontimetech.valeonetworks.com/blog/wordpress-fixes-security-issues-with-5-0-1-release", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://ontimetech.valeonetworks.com/hubfs/OTT%20-%20Color%20Logo.png" }, "name" : "Valeo Networks" } } ```