WordPress Vulnerabilities

WP < 7.1.4 - Unauthenticated RCE During Core Update

Description

WordPress does not adequately restrict access to the core update process in some cases, which could allow an unauthenticated attacker to take over the site while an update is in progress.

Affects WordPress

4.7
Fixed in WordPress 4.7.39
4.7.1
Fixed in WordPress 4.7.39
4.7.2
Fixed in WordPress 4.7.39
4.7.3
Fixed in WordPress 4.7.39
4.7.4
Fixed in WordPress 4.7.39
4.7.5
Fixed in WordPress 4.7.39
4.7.6
Fixed in WordPress 4.7.39
4.7.7
Fixed in WordPress 4.7.39
4.7.8
Fixed in WordPress 4.7.39
4.7.9
Fixed in WordPress 4.7.39
4.7.10
Fixed in WordPress 4.7.39
4.7.11
Fixed in WordPress 4.7.39
4.7.12
Fixed in WordPress 4.7.39
4.7.13
Fixed in WordPress 4.7.39
4.7.14
Fixed in WordPress 4.7.39
4.7.15
Fixed in WordPress 4.7.39
4.7.16
Fixed in WordPress 4.7.39
4.7.17
Fixed in WordPress 4.7.39
4.7.18
Fixed in WordPress 4.7.39
4.7.19
Fixed in WordPress 4.7.39
4.7.20
Fixed in WordPress 4.7.39
4.7.21
Fixed in WordPress 4.7.39
4.7.22
Fixed in WordPress 4.7.39
4.7.23
Fixed in WordPress 4.7.39
4.7.24
Fixed in WordPress 4.7.39
4.7.25
Fixed in WordPress 4.7.39
4.7.26
Fixed in WordPress 4.7.39
4.7.27
Fixed in WordPress 4.7.39
4.7.28
Fixed in WordPress 4.7.39
4.7.29
Fixed in WordPress 4.7.39
4.7.30
Fixed in WordPress 4.7.39
4.7.31
Fixed in WordPress 4.7.39
4.7.32
Fixed in WordPress 4.7.39
4.7.33
Fixed in WordPress 4.7.39
4.7.34
Fixed in WordPress 4.7.39
4.7.35
Fixed in WordPress 4.7.39
4.7.36
Fixed in WordPress 4.7.39
4.7.37
Fixed in WordPress 4.7.39
4.7.38
Fixed in WordPress 4.7.39
4.8
Fixed in WordPress 4.8.34
4.8.1
Fixed in WordPress 4.8.34
4.8.2
Fixed in WordPress 4.8.34
4.8.3
Fixed in WordPress 4.8.34
4.8.4
Fixed in WordPress 4.8.34
4.8.5
Fixed in WordPress 4.8.34
4.8.6
Fixed in WordPress 4.8.34
4.8.7
Fixed in WordPress 4.8.34
4.8.8
Fixed in WordPress 4.8.34
4.8.9
Fixed in WordPress 4.8.34
4.8.10
Fixed in WordPress 4.8.34
4.8.11
Fixed in WordPress 4.8.34
4.8.12
Fixed in WordPress 4.8.34
4.8.13
Fixed in WordPress 4.8.34
4.8.14
Fixed in WordPress 4.8.34
4.8.15
Fixed in WordPress 4.8.34
4.8.16
Fixed in WordPress 4.8.34
4.8.17
Fixed in WordPress 4.8.34
4.8.18
Fixed in WordPress 4.8.34
4.8.19
Fixed in WordPress 4.8.34
4.8.20
Fixed in WordPress 4.8.34
4.8.21
Fixed in WordPress 4.8.34
4.8.22
Fixed in WordPress 4.8.34
4.8.23
Fixed in WordPress 4.8.34
4.8.24
Fixed in WordPress 4.8.34
4.8.25
Fixed in WordPress 4.8.34
4.8.26
Fixed in WordPress 4.8.34
4.8.27
Fixed in WordPress 4.8.34
4.8.28
Fixed in WordPress 4.8.34
4.8.29
Fixed in WordPress 4.8.34
4.8.30
Fixed in WordPress 4.8.34
4.8.31
Fixed in WordPress 4.8.34
4.8.32
Fixed in WordPress 4.8.34
4.8.33
Fixed in WordPress 4.8.34
4.9
Fixed in WordPress 4.9.35
4.9.1
Fixed in WordPress 4.9.35
4.9.2
Fixed in WordPress 4.9.35
4.9.3
Fixed in WordPress 4.9.35
4.9.4
Fixed in WordPress 4.9.35
4.9.5
Fixed in WordPress 4.9.35
4.9.6
Fixed in WordPress 4.9.35
4.9.7
Fixed in WordPress 4.9.35
4.9.8
Fixed in WordPress 4.9.35
4.9.9
Fixed in WordPress 4.9.35
4.9.10
Fixed in WordPress 4.9.35
4.9.11
Fixed in WordPress 4.9.35
4.9.12
Fixed in WordPress 4.9.35
4.9.13
Fixed in WordPress 4.9.35
4.9.14
Fixed in WordPress 4.9.35
4.9.15
Fixed in WordPress 4.9.35
4.9.16
Fixed in WordPress 4.9.35
4.9.17
Fixed in WordPress 4.9.35
4.9.18
Fixed in WordPress 4.9.35
4.9.19
Fixed in WordPress 4.9.35
4.9.20
Fixed in WordPress 4.9.35
4.9.21
Fixed in WordPress 4.9.35
4.9.22
Fixed in WordPress 4.9.35
4.9.23
Fixed in WordPress 4.9.35
4.9.24
Fixed in WordPress 4.9.35
4.9.25
Fixed in WordPress 4.9.35
4.9.26
Fixed in WordPress 4.9.35
4.9.27
Fixed in WordPress 4.9.35
4.9.28
Fixed in WordPress 4.9.35
4.9.29
Fixed in WordPress 4.9.35
4.9.30
Fixed in WordPress 4.9.35
4.9.31
Fixed in WordPress 4.9.35
4.9.32
Fixed in WordPress 4.9.35
4.9.33
Fixed in WordPress 4.9.35
4.9.34
Fixed in WordPress 4.9.35
5.0
Fixed in WordPress 5.0.31
5.0.1
Fixed in WordPress 5.0.31
5.0.2
Fixed in WordPress 5.0.31
5.0.3
Fixed in WordPress 5.0.31
5.0.4
Fixed in WordPress 5.0.31
5.0.6
Fixed in WordPress 5.0.31
5.0.7
Fixed in WordPress 5.0.31
5.0.8
Fixed in WordPress 5.0.31
5.0.9
Fixed in WordPress 5.0.31
5.0.10
Fixed in WordPress 5.0.31
5.0.11
Fixed in WordPress 5.0.31
5.0.12
Fixed in WordPress 5.0.31
5.0.13
Fixed in WordPress 5.0.31
5.0.14
Fixed in WordPress 5.0.31
5.0.15
Fixed in WordPress 5.0.31
5.0.16
Fixed in WordPress 5.0.31
5.0.17
Fixed in WordPress 5.0.31
5.0.18
Fixed in WordPress 5.0.31
5.0.19
Fixed in WordPress 5.0.31
5.0.20
Fixed in WordPress 5.0.31
5.0.21
Fixed in WordPress 5.0.31
5.0.22
Fixed in WordPress 5.0.31
5.0.23
Fixed in WordPress 5.0.31
5.0.24
Fixed in WordPress 5.0.31
5.0.25
Fixed in WordPress 5.0.31
5.0.26
Fixed in WordPress 5.0.31
5.0.27
Fixed in WordPress 5.0.31
5.0.28
Fixed in WordPress 5.0.31
5.0.29
Fixed in WordPress 5.0.31
5.0.30
Fixed in WordPress 5.0.31
5.1
Fixed in WordPress 5.1.28
5.1.1
Fixed in WordPress 5.1.28
5.1.2
Fixed in WordPress 5.1.28
5.1.3
Fixed in WordPress 5.1.28
5.1.4
Fixed in WordPress 5.1.28
5.1.5
Fixed in WordPress 5.1.28
5.1.6
Fixed in WordPress 5.1.28
5.1.7
Fixed in WordPress 5.1.28
5.1.8
Fixed in WordPress 5.1.28
5.1.9
Fixed in WordPress 5.1.28
5.1.10
Fixed in WordPress 5.1.28
5.1.11
Fixed in WordPress 5.1.28
5.1.12
Fixed in WordPress 5.1.28
5.1.13
Fixed in WordPress 5.1.28
5.1.14
Fixed in WordPress 5.1.28
5.1.15
Fixed in WordPress 5.1.28
5.1.16
Fixed in WordPress 5.1.28
5.1.17
Fixed in WordPress 5.1.28
5.1.18
Fixed in WordPress 5.1.28
5.1.19
Fixed in WordPress 5.1.28
5.1.20
Fixed in WordPress 5.1.28
5.1.21
Fixed in WordPress 5.1.28
5.1.22
Fixed in WordPress 5.1.28
5.1.23
Fixed in WordPress 5.1.28
5.1.24
Fixed in WordPress 5.1.28
5.1.25
Fixed in WordPress 5.1.28
5.1.26
Fixed in WordPress 5.1.28
5.1.27
Fixed in WordPress 5.1.28
5.2
Fixed in WordPress 5.2.30
5.2.1
Fixed in WordPress 5.2.30
5.2.2
Fixed in WordPress 5.2.30
5.2.3
Fixed in WordPress 5.2.30
5.2.4
Fixed in WordPress 5.2.30
5.2.5
Fixed in WordPress 5.2.30
5.2.6
Fixed in WordPress 5.2.30
5.2.7
Fixed in WordPress 5.2.30
5.2.8
Fixed in WordPress 5.2.30
5.2.9
Fixed in WordPress 5.2.30
5.2.10
Fixed in WordPress 5.2.30
5.2.11
Fixed in WordPress 5.2.30
5.2.12
Fixed in WordPress 5.2.30
5.2.13
Fixed in WordPress 5.2.30
5.2.14
Fixed in WordPress 5.2.30
5.2.15
Fixed in WordPress 5.2.30
5.2.16
Fixed in WordPress 5.2.30
5.2.17
Fixed in WordPress 5.2.30
5.2.18
Fixed in WordPress 5.2.30
5.2.19
Fixed in WordPress 5.2.30
5.2.20
Fixed in WordPress 5.2.30
5.2.21
Fixed in WordPress 5.2.30
5.2.22
Fixed in WordPress 5.2.30
5.2.23
Fixed in WordPress 5.2.30
5.2.24
Fixed in WordPress 5.2.30
5.2.25
Fixed in WordPress 5.2.30
5.2.26
Fixed in WordPress 5.2.30
5.2.27
Fixed in WordPress 5.2.30
5.2.28
Fixed in WordPress 5.2.30
5.2.29
Fixed in WordPress 5.2.30
5.3
Fixed in WordPress 5.3.27
5.3.1
Fixed in WordPress 5.3.27
5.3.2
Fixed in WordPress 5.3.27
5.3.3
Fixed in WordPress 5.3.27
5.3.4
Fixed in WordPress 5.3.27
5.3.5
Fixed in WordPress 5.3.27
5.3.6
Fixed in WordPress 5.3.27
5.3.7
Fixed in WordPress 5.3.27
5.3.8
Fixed in WordPress 5.3.27
5.3.9
Fixed in WordPress 5.3.27
5.3.10
Fixed in WordPress 5.3.27
5.3.11
Fixed in WordPress 5.3.27
5.3.12
Fixed in WordPress 5.3.27
5.3.13
Fixed in WordPress 5.3.27
5.3.14
Fixed in WordPress 5.3.27
5.3.15
Fixed in WordPress 5.3.27
5.3.16
Fixed in WordPress 5.3.27
5.3.17
Fixed in WordPress 5.3.27
5.3.18
Fixed in WordPress 5.3.27
5.3.19
Fixed in WordPress 5.3.27
5.3.20
Fixed in WordPress 5.3.27
5.3.21
Fixed in WordPress 5.3.27
5.3.22
Fixed in WordPress 5.3.27
5.3.23
Fixed in WordPress 5.3.27
5.3.24
Fixed in WordPress 5.3.27
5.3.25
Fixed in WordPress 5.3.27
5.3.26
Fixed in WordPress 5.3.27
5.4
Fixed in WordPress 5.4.25
5.4.1
Fixed in WordPress 5.4.25
5.4.2
Fixed in WordPress 5.4.25
5.4.3
Fixed in WordPress 5.4.25
5.4.4
Fixed in WordPress 5.4.25
5.4.5
Fixed in WordPress 5.4.25
5.4.6
Fixed in WordPress 5.4.25
5.4.7
Fixed in WordPress 5.4.25
5.4.8
Fixed in WordPress 5.4.25
5.4.9
Fixed in WordPress 5.4.25
5.4.10
Fixed in WordPress 5.4.25
5.4.11
Fixed in WordPress 5.4.25
5.4.12
Fixed in WordPress 5.4.25
5.4.13
Fixed in WordPress 5.4.25
5.4.14
Fixed in WordPress 5.4.25
5.4.15
Fixed in WordPress 5.4.25
5.4.16
Fixed in WordPress 5.4.25
5.4.17
Fixed in WordPress 5.4.25
5.4.18
Fixed in WordPress 5.4.25
5.4.19
Fixed in WordPress 5.4.25
5.4.20
Fixed in WordPress 5.4.25
5.4.21
Fixed in WordPress 5.4.25
5.4.22
Fixed in WordPress 5.4.25
5.4.23
Fixed in WordPress 5.4.25
5.4.24
Fixed in WordPress 5.4.25
5.5
Fixed in WordPress 5.5.24
5.5.1
Fixed in WordPress 5.5.24
5.5.2
Fixed in WordPress 5.5.24
5.5.3
Fixed in WordPress 5.5.24
5.5.4
Fixed in WordPress 5.5.24
5.5.5
Fixed in WordPress 5.5.24
5.5.6
Fixed in WordPress 5.5.24
5.5.7
Fixed in WordPress 5.5.24
5.5.8
Fixed in WordPress 5.5.24
5.5.9
Fixed in WordPress 5.5.24
5.5.10
Fixed in WordPress 5.5.24
5.5.11
Fixed in WordPress 5.5.24
5.5.12
Fixed in WordPress 5.5.24
5.5.13
Fixed in WordPress 5.5.24
5.5.14
Fixed in WordPress 5.5.24
5.5.15
Fixed in WordPress 5.5.24
5.5.16
Fixed in WordPress 5.5.24
5.5.17
Fixed in WordPress 5.5.24
5.5.18
Fixed in WordPress 5.5.24
5.5.19
Fixed in WordPress 5.5.24
5.5.20
Fixed in WordPress 5.5.24
5.5.21
Fixed in WordPress 5.5.24
5.5.22
Fixed in WordPress 5.5.24
5.5.23
Fixed in WordPress 5.5.24
5.6
Fixed in WordPress 5.6.23
5.6.1
Fixed in WordPress 5.6.23
5.6.2
Fixed in WordPress 5.6.23
5.6.3
Fixed in WordPress 5.6.23
5.6.4
Fixed in WordPress 5.6.23
5.6.5
Fixed in WordPress 5.6.23
5.6.6
Fixed in WordPress 5.6.23
5.6.7
Fixed in WordPress 5.6.23
5.6.8
Fixed in WordPress 5.6.23
5.6.9
Fixed in WordPress 5.6.23
5.6.10
Fixed in WordPress 5.6.23
5.6.11
Fixed in WordPress 5.6.23
5.6.12
Fixed in WordPress 5.6.23
5.6.13
Fixed in WordPress 5.6.23
5.6.14
Fixed in WordPress 5.6.23
5.6.15
Fixed in WordPress 5.6.23
5.6.16
Fixed in WordPress 5.6.23
5.6.17
Fixed in WordPress 5.6.23
5.6.18
Fixed in WordPress 5.6.23
5.6.19
Fixed in WordPress 5.6.23
5.6.20
Fixed in WordPress 5.6.23
5.6.21
Fixed in WordPress 5.6.23
5.6.22
Fixed in WordPress 5.6.23
5.7
Fixed in WordPress 5.7.21
5.7.1
Fixed in WordPress 5.7.21
5.7.2
Fixed in WordPress 5.7.21
5.7.3
Fixed in WordPress 5.7.21
5.7.4
Fixed in WordPress 5.7.21
5.7.5
Fixed in WordPress 5.7.21
5.7.6
Fixed in WordPress 5.7.21
5.7.7
Fixed in WordPress 5.7.21
5.7.8
Fixed in WordPress 5.7.21
5.7.9
Fixed in WordPress 5.7.21
5.7.10
Fixed in WordPress 5.7.21
5.7.11
Fixed in WordPress 5.7.21
5.7.12
Fixed in WordPress 5.7.21
5.7.13
Fixed in WordPress 5.7.21
5.7.14
Fixed in WordPress 5.7.21
5.7.15
Fixed in WordPress 5.7.21
5.7.16
Fixed in WordPress 5.7.21
5.7.17
Fixed in WordPress 5.7.21
5.7.18
Fixed in WordPress 5.7.21
5.7.19
Fixed in WordPress 5.7.21
5.7.20
Fixed in WordPress 5.7.21
5.8
Fixed in WordPress 5.8.19
5.8.1
Fixed in WordPress 5.8.19
5.8.2
Fixed in WordPress 5.8.19
5.8.3
Fixed in WordPress 5.8.19
5.8.4
Fixed in WordPress 5.8.19
5.8.5
Fixed in WordPress 5.8.19
5.8.6
Fixed in WordPress 5.8.19
5.8.7
Fixed in WordPress 5.8.19
5.8.8
Fixed in WordPress 5.8.19
5.8.9
Fixed in WordPress 5.8.19
5.8.10
Fixed in WordPress 5.8.19
5.8.11
Fixed in WordPress 5.8.19
5.8.12
Fixed in WordPress 5.8.19
5.8.13
Fixed in WordPress 5.8.19
5.8.14
Fixed in WordPress 5.8.19
5.8.15
Fixed in WordPress 5.8.19
5.8.16
Fixed in WordPress 5.8.19
5.8.17
Fixed in WordPress 5.8.19
5.8.18
Fixed in WordPress 5.8.19
5.9
Fixed in WordPress 5.9.20
5.9.1
Fixed in WordPress 5.9.20
5.9.2
Fixed in WordPress 5.9.20
5.9.3
Fixed in WordPress 5.9.20
5.9.4
Fixed in WordPress 5.9.20
5.9.5
Fixed in WordPress 5.9.20
5.9.6
Fixed in WordPress 5.9.20
5.9.7
Fixed in WordPress 5.9.20
5.9.8
Fixed in WordPress 5.9.20
5.9.9
Fixed in WordPress 5.9.20
5.9.10
Fixed in WordPress 5.9.20
5.9.11
Fixed in WordPress 5.9.20
5.9.12
Fixed in WordPress 5.9.20
5.9.13
Fixed in WordPress 5.9.20
5.9.14
Fixed in WordPress 5.9.20
5.9.15
Fixed in WordPress 5.9.20
5.9.16
Fixed in WordPress 5.9.20
5.9.17
Fixed in WordPress 5.9.20
5.9.18
Fixed in WordPress 5.9.20
5.9.19
Fixed in WordPress 5.9.20
6.0
Fixed in WordPress 6.0.18
6.0.1
Fixed in WordPress 6.0.18
6.0.2
Fixed in WordPress 6.0.18
6.0.3
Fixed in WordPress 6.0.18
6.0.4
Fixed in WordPress 6.0.18
6.0.5
Fixed in WordPress 6.0.18
6.0.6
Fixed in WordPress 6.0.18
6.0.7
Fixed in WordPress 6.0.18
6.0.8
Fixed in WordPress 6.0.18
6.0.9
Fixed in WordPress 6.0.18
6.0.10
Fixed in WordPress 6.0.18
6.0.11
Fixed in WordPress 6.0.18
6.0.12
Fixed in WordPress 6.0.18
6.0.13
Fixed in WordPress 6.0.18
6.0.14
Fixed in WordPress 6.0.18
6.0.15
Fixed in WordPress 6.0.18
6.0.16
Fixed in WordPress 6.0.18
6.0.17
Fixed in WordPress 6.0.18
6.1
Fixed in WordPress 6.1.16
6.1.1
Fixed in WordPress 6.1.16
6.1.2
Fixed in WordPress 6.1.16
6.1.3
Fixed in WordPress 6.1.16
6.1.4
Fixed in WordPress 6.1.16
6.1.5
Fixed in WordPress 6.1.16
6.1.6
Fixed in WordPress 6.1.16
6.1.7
Fixed in WordPress 6.1.16
6.1.8
Fixed in WordPress 6.1.16
6.1.9
Fixed in WordPress 6.1.16
6.1.10
Fixed in WordPress 6.1.16
6.1.11
Fixed in WordPress 6.1.16
6.1.12
Fixed in WordPress 6.1.16
6.1.13
Fixed in WordPress 6.1.16
6.1.14
Fixed in WordPress 6.1.16
6.1.15
Fixed in WordPress 6.1.16
6.2
Fixed in WordPress 6.2.15
6.2.1
Fixed in WordPress 6.2.15
6.2.2
Fixed in WordPress 6.2.15
6.2.3
Fixed in WordPress 6.2.15
6.2.4
Fixed in WordPress 6.2.15
6.2.5
Fixed in WordPress 6.2.15
6.2.6
Fixed in WordPress 6.2.15
6.2.7
Fixed in WordPress 6.2.15
6.2.8
Fixed in WordPress 6.2.15
6.2.9
Fixed in WordPress 6.2.15
6.2.10
Fixed in WordPress 6.2.15
6.2.11
Fixed in WordPress 6.2.15
6.2.12
Fixed in WordPress 6.2.15
6.2.13
Fixed in WordPress 6.2.15
6.2.14
Fixed in WordPress 6.2.15
6.3
Fixed in WordPress 6.3.14
6.3.1
Fixed in WordPress 6.3.14
6.3.2
Fixed in WordPress 6.3.14
6.3.3
Fixed in WordPress 6.3.14
6.3.4
Fixed in WordPress 6.3.14
6.3.5
Fixed in WordPress 6.3.14
6.3.6
Fixed in WordPress 6.3.14
6.3.7
Fixed in WordPress 6.3.14
6.3.8
Fixed in WordPress 6.3.14
6.3.9
Fixed in WordPress 6.3.14
6.3.10
Fixed in WordPress 6.3.14
6.3.11
Fixed in WordPress 6.3.14
6.3.12
Fixed in WordPress 6.3.14
6.3.13
Fixed in WordPress 6.3.14
6.4
Fixed in WordPress 6.4.14
6.4.1
Fixed in WordPress 6.4.14
6.4.2
Fixed in WordPress 6.4.14
6.4.3
Fixed in WordPress 6.4.14
6.4.4
Fixed in WordPress 6.4.14
6.4.5
Fixed in WordPress 6.4.14
6.4.6
Fixed in WordPress 6.4.14
6.4.7
Fixed in WordPress 6.4.14
6.4.8
Fixed in WordPress 6.4.14
6.4.9
Fixed in WordPress 6.4.14
6.4.10
Fixed in WordPress 6.4.14
6.4.11
Fixed in WordPress 6.4.14
6.4.12
Fixed in WordPress 6.4.14
6.4.13
Fixed in WordPress 6.4.14
6.5
Fixed in WordPress 6.5.14
6.5.2
Fixed in WordPress 6.5.14
6.5.3
Fixed in WordPress 6.5.14
6.5.4
Fixed in WordPress 6.5.14
6.5.5
Fixed in WordPress 6.5.14
6.5.6
Fixed in WordPress 6.5.14
6.5.7
Fixed in WordPress 6.5.14
6.5.8
Fixed in WordPress 6.5.14
6.5.9
Fixed in WordPress 6.5.14
6.5.10
Fixed in WordPress 6.5.14
6.5.11
Fixed in WordPress 6.5.14
6.5.12
Fixed in WordPress 6.5.14
6.5.13
Fixed in WordPress 6.5.14
6.6
Fixed in WordPress 6.6.11
6.6.1
Fixed in WordPress 6.6.11
6.6.2
Fixed in WordPress 6.6.11
6.6.3
Fixed in WordPress 6.6.11
6.6.4
Fixed in WordPress 6.6.11
6.6.5
Fixed in WordPress 6.6.11
6.6.6
Fixed in WordPress 6.6.11
6.6.7
Fixed in WordPress 6.6.11
6.6.8
Fixed in WordPress 6.6.11
6.6.9
Fixed in WordPress 6.6.11
6.6.10
Fixed in WordPress 6.6.11
6.7
Fixed in WordPress 6.7.11
6.7.1
Fixed in WordPress 6.7.11
6.7.2
Fixed in WordPress 6.7.11
6.7.3
Fixed in WordPress 6.7.11
6.7.4
Fixed in WordPress 6.7.11
6.7.5
Fixed in WordPress 6.7.11
6.7.6
Fixed in WordPress 6.7.11
6.7.7
Fixed in WordPress 6.7.11
6.7.8
Fixed in WordPress 6.7.11
6.7.9
Fixed in WordPress 6.7.11
6.7.10
Fixed in WordPress 6.7.11
6.8
Fixed in WordPress 6.8.12
6.8.1
Fixed in WordPress 6.8.12
6.8.2
Fixed in WordPress 6.8.12
6.8.3
Fixed in WordPress 6.8.12
6.8.4
Fixed in WordPress 6.8.12
6.8.5
Fixed in WordPress 6.8.12
6.8.6
Fixed in WordPress 6.8.12
6.8.7
Fixed in WordPress 6.8.12
6.8.8
Fixed in WordPress 6.8.12
6.8.9
Fixed in WordPress 6.8.12
6.8.10
Fixed in WordPress 6.8.12
6.8.11
Fixed in WordPress 6.8.12
6.9
Fixed in WordPress 6.9.11
6.9.1
Fixed in WordPress 6.9.11
6.9.2
Fixed in WordPress 6.9.11
6.9.3
Fixed in WordPress 6.9.11
6.9.4
Fixed in WordPress 6.9.11
6.9.5
Fixed in WordPress 6.9.11
6.9.6
Fixed in WordPress 6.9.11
6.9.7
Fixed in WordPress 6.9.11
6.9.8
Fixed in WordPress 6.9.11
6.9.9
Fixed in WordPress 6.9.11
6.9.10
Fixed in WordPress 6.9.11
7.0
Fixed in WordPress 7.0.8
7.0.1
Fixed in WordPress 7.0.8
7.0.2
Fixed in WordPress 7.0.8
7.0.3
Fixed in WordPress 7.0.8
7.0.4
Fixed in WordPress 7.0.8
7.0.5
Fixed in WordPress 7.0.8
7.0.6
Fixed in WordPress 7.0.8
7.0.7
Fixed in WordPress 7.0.8
7.1
Fixed in WordPress 7.1.4
7.1.1
Fixed in WordPress 7.1.4
7.1.2
Fixed in WordPress 7.1.4
7.1.3
Fixed in WordPress 7.1.4

References

URL
https://wordpress.org/news/2026/10/wordpress-7-1-4/

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94
CVSS
8.1 (high)

Miscellaneous

Original Researcher
Umut Bayram
Verified
Yes
WPVDB ID
1c1c406e-3564-4dde-8d97-413a6f95f6fd

Timeline

Publicly Published
2026-10-29 (about 1 day ago)
Added
2026-10-29 (about 18 hours ago)
Last Updated
2026-10-29 (about 18 hours ago)

Other

Published
Title
Published
2026-08-19
Title
Query Wrangler < 1.5.58 - Authenticated (Subscriber+) Remote Code Execution
Published
2026-02-12
Title
DukaMarket <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution
Published
2024-05-14
Title
Insert or Embed Articulate Content into WordPress < 4.3000000025 - Author+ Upload to RCE
Published
2025-05-16
Title
MapSVG Lite < 8.6.10 - Unauthenticated Arbitrary Shortcode Execution
Published
2026-08-24
Title
Pods < 3.3.9.1 - Author+ RCE via Shortcode Display Callback