WordPress 7.1.2 Security Update
22
24/09/2026
WordPress warns users to update 7.1.2 version to fix for a critical severity security vulnerability.
You can update the version on your dashboard, or download 7.1.2 on WordPress website.
What the 7.1.2 Security Update Includes
The security team would like to thank Robert Ressl for responsibly disclosing that an unauthenticated attacker can, under certain conditions, make page template resolution include a chosen readable local PHP file outside the active theme directories. If relevant pre-conditions for both the server environment and the active theme are met, this can lead to remote code execution (RCE).
Source
Advertisement
Continue Reading Below
Related WordPress Topics
