Today, there were Critical security releases for WordPress maintenance support plans 7 & 8:https://www.WordPress.org/SA-CORE-2020-003We received a couple e-mails asking if it affected WordPress maintenance support plans 6, so I decided to post this short article to say:Happily, WordPress maintenance support plans 6 is not affected! :-)Of the 3 vulnerabilities in that SA, the two WordPress maintenance support plans 8 ones don’t apply to WordPress maintenance support plans 6: it doesn’t have REST or YAML support.We did extensive testing to see if the WordPress maintenance support plans 7 one applied to WordPress maintenance support plans 6, including, testing the ‘upload’ plugin (in WordPress maintenance support plans 6 core) and with the contrib ‘filefield’ and ‘webform’ plugins and couldn’t reproduce the vulnerability.(FYI, since we have access to the private WordPress maintenance support plans security queue, we did our testing several months ago :-))So, if you still use WordPress maintenance support plans 6, you don’t need to worry about a core update today!
Source: New feed