WordPress 4.7.3 修复6处安全漏洞，强烈建议更新

WordPress 4.7.3 已经发布，这是一次安全更新，这些安全问题出现在之前的所有版本，强烈建议大家马上进行更新！

WordPress-4.7.3

WordPress 4.7.2 以及之前的所有版本都存在以下6个安全问题：
通过媒体文件的元数据的跨网站脚本（XSS）
控制字符可以欺骗重定向网址验证
管理员可以使用插件删除功能删除非预期文件
通过YouTube中的视频网址嵌入跨网站脚本（XSS）
通过分类法术语（taxonomy term）名称的跨站点脚本（XSS）
按这里（Press This 一个书签快捷发布功能）的跨站点请求伪造（CSRF）导致过度使用服务器资源
除了上面的安全问题，WordPress 4.7.3 还包含了4.7版本系列的39处维护修复。有关详细信息，请参阅发行说明或查看更改列表。

在这里下载WordPress 4.7.3或转到仪表板→更新，只需点击“立即更新”。支持自动后台更新的网站已开始更新到WordPress 4.7.3。
使用中文版的朋友，也可以直接进行更新的，你的中文语言包不会丢失的！

如果你在使用 wp 4.5、4.6 系列的版本，也建议升级到这些系列的最新版！

文件修订列表：

wp-admin / js / common.jswp-admin / js / customize-controls.min.jswp-admin / js / editor.min.jswp-admin / js / customize-nav-menus.min.jswp-admin / js / tags-box.jswp-admin / js / customize-controls.jswp-admin / js / editor.jswp-admin / js / customize-nav-menus.jswp-admin / js / common.min.jswp-admin / js / tags-box.min.jswp-admin / plugins.phpwp-admin / includes / class-wp-press-this.phpwp-admin / includes / media.phpwp-admin / includes / image.phpwp-admin / about.phpwp-includes / embed.phpwp-includes / class-wp-customize-manager.phpwp-includes / rest-api.phpwp-includes / js / media-views.min.jswp-includes / js / wp-api.jswp-includes / js / tinymce / plugins / wpeditimage / plugin.min.jswp-includes / js / tinymce / plugins / wpeditimage / plugin.jswp-includes / js / tinymce / wp-tinymce.js.gzwp-includes / js / customize-selective-refresh.min.jswp-includes / js / media-views.jswp-includes / js / customize-preview.min.jswp-includes / js / customize-views.min.jswp-includes / js / customize-selective-refresh.jswp-includes / js / wp-api.min.jswp-includes / js / customize-preview.jswp-includes / js / customize-views.jswp-includes / class-wp-image-editor-imagick.phpwp-includes / class-wp-customize-nav-menus.phpwp-includes / version.phpwp-includes / class-walker-page.phpwp-includes / pluggable.phpwp-includes / formatting.phpwp-includes / class-wp-customize-widgets.phpwp-includes / rest-api / class-wp-rest-request.phpwp-includes / rest-api / endpoints / class-wp-rest-posts-controller.phpwp-includes / rest-api / endpoints / class-wp-rest-revisions-controller.phpwp-includes / rest-api / endpoints / class-wp-rest-users-controller.phpwp-includes / class-wp-customize-setting.phpwp-includes / theme.phpwp-includes / functions.phpwp-includes / media.phpwp-includes / class-wp-http-requests-hooks.phpwp-includes / class-wp-taxonomy.phpwp-content / plugins