Skepra

Skepra / Web recovery & resilience

WordPress 7.1.4 security release.

On 28 October 2026 WordPress.org published 7.1.4, a security release fixing multiple issues including a weakness in the upgrade process.

Ask whether this applies to your site

What was published

Fixes include a weakness in the WordPress upgrade process that could lead to remote code execution during the upgrade window, several stored XSS issues (including in the Interactivity API and Customizer selective refresh), a stored denial-of-service issue in the Interactivity API, and unauthenticated discovery of unpublished Customizer changesets.

Affected versions

WordPress installations not yet updated to 7.1.4.

How to check if this applies to your site

In wp-admin, go to Dashboard → Updates, or check the version shown at the bottom of most admin screens. If it is below 7.1.4, the site has not yet received this security release.