Commit

180ddd5

If running WordPress, please go update to 7.1.4 **now**. https://wordpress.org/news/2026/10/wordpress-7-1-4/

WordPress NewsWordPress 7.1.4This security release features fixes for multiple issues. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.4 from WordPre…

Timothy @timtjoe17h1fd159c

what happened? can we get a TLDR?

Arūnas Liuiza @ideag17h9bdacac

a handful of security fixes in a security release. A bunch of different stored XSS vectors, plus a possible RCE in the update process. Don't have details on that last one yet, but could be potentially serious. Only can happen during update thought, so not too serious.

bestCoder1877 @BestCoder187716h

There is also php2shell

19:24 · Oct 28, 2026commit 180ddd5

Arūnas Liuiza @ideag16h

That is very old news at this point. Also, nothing to do there at application level.