Skepra

Skepra / Web recovery & resilience

WordPress 7.1.3 security release.

On 6 October 2026 WordPress.org published 7.1.3, a maintenance and security release fixing 7 vulnerabilities in WordPress core.

Ask whether this applies to your site

What was published

Fixes include a second-order SQL injection in the WXR export, a stored XSS on the comments administration page, a denial-of-service issue in WP_Http::make_absolute_url(), an unauthenticated disclosure of comments on private and unpublished posts, and three further issues.

Affected versions

WordPress installations not yet updated to 7.1.3.

How to check if this applies to your site

In wp-admin, go to Dashboard → Updates, or check the version shown at the bottom of most admin screens. If it is below 7.1.3, the site has not yet received this security release.