Commit

9eae859

If running WordPress, please go update to 7.1.4 **now**. https://wordpress.org/news/2026/10/wordpress-7-1-4/

WordPress NewsWordPress 7.1.4This security release features fixes for multiple issues. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.4 from WordPre…

Timothy @timtjoe1d1fd159c

what happened? can we get a TLDR?

Arūnas Liuiza @ideag1d9bdacac

a handful of security fixes in a security release. A bunch of different stored XSS vectors, plus a possible RCE in the update process. Don't have details on that last one yet, but could be potentially serious. Only can happen during update thought, so not too serious.

bestCoder1877 @BestCoder18771d180ddd5

There is also php2shell

Arūnas Liuiza @ideag1d

That is very old news at this point. Also, nothing to do there at application level.

19:26 · Oct 28, 2026commit 9eae859