{"id":16370712,"date":"2026-09-17T19:38:10","date_gmt":"2026-09-17T19:38:10","guid":{"rendered":"https:\/\/wordpress.org\/documentation\/?post_type=helphub_version&#038;p=16370712"},"modified":"2026-09-17T19:39:49","modified_gmt":"2026-09-17T19:39:49","slug":"version-6-7-8","status":"publish","type":"helphub_version","link":"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-7-8\/","title":{"rendered":"Version 6.7.8"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">On September 17, 2026, WordPress 6.7.8 was released to the public.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Installation\/Update Information<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To get this version, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit <a href=\"https:\/\/wordpress.org\/download\/releases\/\">https:\/\/wordpress.org\/download\/releases\/<\/a>.<br>For step-by-step instructions on installing and updating WordPress:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/wordpress.org\/documentation\/article\/updating-wordpress\/\">Updating WordPress<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If you are new to WordPress, we recommend that you begin with the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/wordpress.org\/documentation\/article\/get-started-with-wordpress\/\">Get Started With WordPress<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/wordpress.org\/documentation\/article\/first-steps-with-wordpress-classic\/\">First Steps With WordPress<\/a> or <a href=\"https:\/\/developer.wordpress.org\/advanced-administration\/upgrade\/upgrading\/\">Upgrading WordPress Extended<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.wordpress.org\/courses\/\">WordPress Courses<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Summary<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Security updates<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This release features several security fixes. Because this is a security release, <strong>it is recommended that you update your sites immediately.<\/strong><br>The security team would like to thank the following people for <a href=\"https:\/\/hackerone.com\/wordpress?type=team\">responsibly reporting vulnerabilities<\/a>, and allowing them to be fixed in this release:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>An issue allowing a crafted URL to install and preview a theme from WordPress.org reported by Paulos Yibelo and pwn.ai<\/li>\n\n\n\n<li>A stored cross-site scripting (XSS) issue in custom header images on some themes reported by Jeremy Felt of the WordPress Security Team<\/li>\n\n\n\n<li>An information disclosure issue exposing the title of a private parent post reported by HDWSec<\/li>\n\n\n\n<li>An HTML API issue allowing modified text to break out of an HTML comment reported by Jeremy Felt of the WordPress Security Team<\/li>\n\n\n\n<li>A multisite issue allowing a site administrator to network-activate a network-only plugin reported by Jesse McNeil<\/li>\n\n\n\n<li>A Contributor+ arbitrary post overwrite issue reported by Anthropic<\/li>\n\n\n\n<li>An authenticated path traversal issue in the REST API templates controller reported by Anthropic<\/li>\n\n\n\n<li>An authorization issue allowing any authenticated user to reparent comments, including notes, reported by viridis<\/li>\n\n\n\n<li>An XML-RPC issue allowing changeset posts to bypass the custom CSS capability check reported by Ben Bidner of the WordPress Security Team<\/li>\n\n\n\n<li>A Contributor+ disclosure of draft and pending post slugs reported by hermanhms<\/li>\n\n\n\n<li>An unauthenticated stored cross-site scripting (XSS) issue via paragraph formatting, subject to comment approval, reported by Rafie Muhammad (Awesome Motive, Inc.)<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Change log<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">List of files revised<\/h3>\n\n\n\n<pre class=\"wp-block-preformatted\">\/wp-admin\/includes\/ajax-actions.php<br>\/wp-admin\/includes\/class-custom-image-header.php<br>\/wp-admin\/includes\/media.php<br>\/wp-admin\/includes\/plugin.php<br>\/wp-admin\/includes\/post.php<br>\/wp-admin\/js\/theme.js<br>\/wp-includes\/block-template-utils.php<br>\/wp-includes\/class-wp-xmlrpc-server.php<br>\/wp-includes\/customize\/class-wp-customize-header-image-setting.php<br>\/wp-includes\/formatting.php<br>\/wp-includes\/html-api\/class-wp-html-tag-processor.php<br>\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php<br>\/wp-includes\/theme.php<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">List of packages revised<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">No package was revised.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>On September 17, 2026, WordPress 6.7.8 was released to the public. Installation\/Update Information To get this version, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit https:\/\/wordpress.org\/download\/releases\/.For step-by-step instructions on installing and updating WordPress: Updating WordPress If you are new to WordPress, we recommend that you begin with the [&hellip;]<\/p>\n","protected":false},"author":2097165,"featured_media":0,"menu_order":0,"template":"","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":""},"helphub_major_release":[],"class_list":["post-16370712","helphub_version","type-helphub_version","status-publish","hentry"],"revision_note":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/16370712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions"}],"about":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/types\/helphub_version"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/users\/2097165"}],"version-history":[{"count":5,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/16370712\/revisions"}],"predecessor-version":[{"id":16370858,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/16370712\/revisions\/16370858"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/media?parent=16370712"}],"wp:term":[{"taxonomy":"helphub_major_release","embeddable":true,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/helphub_major_release?post=16370712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}