Commit

9bdacac

If running WordPress, please go update to 7.1.4 **now**. https://wordpress.org/news/2026/10/wordpress-7-1-4/

WordPress NewsWordPress 7.1.4This security release features fixes for multiple issues. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.4 from WordPre…

Timothy @timtjoe16h1fd159c

what happened? can we get a TLDR?

Arūnas Liuiza @ideag16h

a handful of security fixes in a security release. A bunch of different stored XSS vectors, plus a possible RCE in the update process. Don't have details on that last one yet, but could be potentially serious. Only can happen during update thought, so not too serious.

19:04 · Oct 28, 2026commit 9bdacac

bestCoder1877 @BestCoder187715h

There is also php2shell