WordPress 7.1.4 Security Release Fixes an Upgrade Process RCE and Stored XSS Issues
WordPress 7.1.4 is a security release with 22 fixes, including a remote code execution risk during upgrades and stored XSS issues in…
Browse
WordPress
WordPress insights, tips and project stories from my work building and supporting WordPress sites, plugins and platforms.
-
Read more: WordPress 7.1.4 Security Release Fixes an Upgrade Process RCE and Stored XSS Issues
-
WordPress 7.1.3, WooCommerce 11.2, Claude Haiku 5.5 and Grok Voice 3.0: Software Updates, October 1 to 14, 2026
Read more: WordPress 7.1.3, WooCommerce 11.2, Claude Haiku 5.5 and Grok Voice 3.0: Software Updates, October 1 to 14, 2026Eight releases from October 1 to 14, 2026: WordPress 7.1.3 and WooCommerce 11.2 security fixes, Claude Haiku 5.5, Claude Managed Agents dynamic…
-
WooCommerce 11.2 Matches CSV Imports by GTIN and Adds Checkout Date Fields
Read more: WooCommerce 11.2 Matches CSV Imports by GTIN and Adds Checkout Date FieldsBarcode based CSV updates, native date pickers for checkout fields, safer reset emails and a PublishPress Future warning for anyone on 4.10.3…
-
WordPress 7.1.3 Fixes Pending Comment XSS and a WXR Export SQL Injection
Read more: WordPress 7.1.3 Fixes Pending Comment XSS and a WXR Export SQL InjectionWordPress 7.1.3 includes 7 security fixes and 4 bug fixes, including a stored XSS via pending comments and a second order SQL…
-
Grok 4.7, Claude Opus 5.5, GPT-6.1 Sol and WordPress 7.1.2: Software Updates, September 15 to 30, 2026
Read more: Grok 4.7, Claude Opus 5.5, GPT-6.1 Sol and WordPress 7.1.2: Software Updates, September 15 to 30, 2026WordPress 7.1.2 fixed a critical flaw, PHP and WooCommerce shipped security updates, and xAI, Anthropic and OpenAI released Grok 4.7, Claude Opus…
-
WordPress 7.1.2 Patches an Unauthenticated Template Vulnerability
Read more: WordPress 7.1.2 Patches an Unauthenticated Template VulnerabilityWordPress 7.1.2 fixes a critical, unauthenticated template resolution vulnerability that can lead to remote code execution on any affected public site.
-
WordPress 7.1.1 Fixes Comment XSS Plus 36 Core and Editor Bugs
Read more: WordPress 7.1.1 Fixes Comment XSS Plus 36 Core and Editor BugsWordPress 7.1.1 includes 11 security fixes, among them a stored XSS through comments in wpautop(), and 36 bug fixes across core and…
-
WooCommerce 11.1 Gives Every Store Variation Galleries and EU Order Withdrawal
Read more: WooCommerce 11.1 Gives Every Store Variation Galleries and EU Order WithdrawalAdditional Variation Images retires as galleries reach every store, a 14 day withdrawal form arrives for EU buyers and WordPress 7.0 is…
-
WordPress 7.1: Responsive Styles, a New Media Editor and Richer Notes
Read more: WordPress 7.1: Responsive Styles, a New Media Editor and Richer NotesWordPress 7.1 adds responsive styles, a persistent admin bar, a new media editor, richer Notes and Playlist and Tabs blocks, plus a…
-
WordPress 7.0.4 Fixes an Imagick and Ghostscript Code Execution Risk
Read more: WordPress 7.0.4 Fixes an Imagick and Ghostscript Code Execution RiskWordPress 7.0.4 fixes an author level remote code execution issue on sites whose servers use Imagick and Ghostscript to process images and…
-
WordPress 7.0.3 Fixes a Login Screen XSS and 11 More Security Issues
Read more: WordPress 7.0.3 Fixes a Login Screen XSS and 11 More Security IssuesWordPress 7.0.3 fixes 12 security issues, including a login screen XSS reachable without an account and a multisite privilege escalation.
-
WooCommerce 11.0 Lets Customers Claim Past Guest Orders by Email
Read more: WooCommerce 11.0 Lets Customers Claim Past Guest Orders by EmailLogged in shoppers can attach earlier guest orders after email verification, analytics retries failed imports and failed orders give stock back.