Skip to content

Version 7.1.2

Latest
Latest

Choose a tag to compare

View all tags
@wordpress-packager wordpress-packager released this 22 Sep 14:06
7.1.2
eb3d108
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Sourced from WordPress.org Documentation.

Summary

Security updates

This release features one security fix. Because this is a security release, it is recommended that you update your sites immediately.
The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:

  • An unauthenticated path traversal issue in page-template resolution leading to conditional remote code execution reported by Robert Ressl

As a courtesy, these fixes are also available in older affected branches of WordPress. As a reminder, only the most recent version of WordPress is actively supported.

  • WordPress 7.0 is affected by this vulnerability. Version 7.0.6 has been released containing a fix.
  • WordPress 6.9 is affected by this vulnerability. Version 6.9.9 has been released containing a fix.
  • WordPress 6.8 is affected by this vulnerability. Version 6.8.10 has been released containing a fix.
  • WordPress 6.7 is affected by this vulnerability. Version 6.7.9 has been released containing a fix.
  • WordPress 6.6 is affected by this vulnerability. Version 6.6.9 has been released containing a fix.
  • WordPress 6.5 is affected by this vulnerability. Version 6.5.12 has been released containing a fix.
  • WordPress 6.4 is affected by this vulnerability. Version 6.4.12 has been released containing a fix.
  • WordPress 6.3 is affected by this vulnerability. Version 6.3.12 has been released containing a fix.
  • WordPress 6.2 is affected by this vulnerability. Version 6.2.13 has been released containing a fix.
  • WordPress 6.1 is affected by this vulnerability. Version 6.1.14 has been released containing a fix.
  • WordPress 6.0 is affected by this vulnerability. Version 6.0.16 has been released containing a fix.
  • WordPress 5.9 is affected by this vulnerability. Version 5.9.18 has been released containing a fix.
  • WordPress 5.8 is affected by this vulnerability. Version 5.8.17 has been released containing a fix.
  • WordPress 5.7 is affected by this vulnerability. Version 5.7.19 has been released containing a fix.
  • WordPress 5.6 is affected by this vulnerability. Version 5.6.21 has been released containing a fix.
  • WordPress 5.5 is affected by this vulnerability. Version 5.5.22 has been released containing a fix.
  • WordPress 5.4 is affected by this vulnerability. Version 5.4.23 has been released containing a fix.
  • WordPress 5.3 is affected by this vulnerability. Version 5.3.25 has been released containing a fix.
  • WordPress 5.2 is affected by this vulnerability. Version 5.2.28 has been released containing a fix.
  • WordPress 5.1 is affected by this vulnerability. Version 5.1.26 has been released containing a fix.
  • WordPress 5.0 is affected by this vulnerability. Version 5.0.29 has been released containing a fix.
  • WordPress 4.9 is affected by this vulnerability. Version 4.9.33 has been released containing a fix.
  • WordPress 4.8 is affected by this vulnerability. Version 4.8.32 has been released containing a fix.
  • WordPress 4.7 is affected by this vulnerability. Version 4.7.37 has been released containing a fix.
  • WordPress 4.6 and earlier no longer receive security updates.
Assets 2
Loading