a WordPress plugin containing the fixed files is available in the plugin repository. Thank you to the reporters of this issue for practicing responsible security disclosure: Enguerran Gillier and Widiz. 21 other bugs were fixed in WordPress 4.9.2. Particularly of note were:
- The previous taxonomy-agnostic behavior of
- Switching themes will now attempt to restore previous widget assignments, even when there are no sidebars to map.