{"id":16371315,"date":"2026-10-28T17:02:27","date_gmt":"2026-10-28T17:02:27","guid":{"rendered":"https:\/\/wordpress.org\/documentation\/?post_type=helphub_version&amp;p=16371315"},"modified":"2026-10-28T17:02:27","modified_gmt":"2026-10-28T17:02:27","slug":"version-7-1-4","status":"publish","type":"helphub_version","link":"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-7-1-4\/","title":{"rendered":"Version 7.1.4"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">On October 28, 2026, WordPress 7.1.4 was released to the public.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Installation\/Update Information<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To get this version, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit <a href=\"https:\/\/wordpress.org\/download\/releases\/\">https:\/\/wordpress.org\/download\/releases\/<\/a>.<br>For step-by-step instructions on installing and updating WordPress:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/wordpress.org\/documentation\/article\/updating-wordpress\/\">Updating WordPress<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If you are new to WordPress, we recommend that you begin with the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/wordpress.org\/documentation\/article\/get-started-with-wordpress\/\">Get Started With WordPress<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/wordpress.org\/documentation\/article\/first-steps-with-wordpress-classic\/\">First Steps With WordPress<\/a> or <a href=\"https:\/\/developer.wordpress.org\/advanced-administration\/upgrade\/upgrading\/\">Upgrading WordPress Extended<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.wordpress.org\/courses\/\">WordPress Courses<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Summary<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Security updates<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This release features several security fixes. Because this is a security release, <strong>it is recommended that you update your sites immediately.<\/strong><br>The security team would like to thank the following people for <a href=\"https:\/\/hackerone.com\/wordpress?type=team\">responsibly reporting vulnerabilities<\/a>, and allowing them to be fixed in this release:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>An Editor+ stored cross-site scripting (XSS) issue in the personal data erasure requests screen reported by Anthropic<\/li>\n\n\n\n<li>A Contributor+ stored cross-site scripting (XSS) issue via whitespace in block delimiters reported by Rafie Muhammad (Awesome Motive, Inc.)<\/li>\n\n\n\n<li>An information disclosure issue exposing unpublished Customizer changes to unauthenticated visitors reported by Antonio Lorensius Silaban<\/li>\n\n\n\n<li>A hardening fix for unescaped usernames on the multisite Network Users screens reported by Anthropic<\/li>\n\n\n\n<li>A permissions issue letting custom roles that moderate comments read, edit and delete notes on posts they can&#8217;t edit reported by Ramon of the WordPress Security Team<\/li>\n\n\n\n<li>A race condition during core updates that could lead to remote code execution reported by Umut Bayram<\/li>\n\n\n\n<li>A Contributor+ issue in Interactivity API bindings that lets object elements load admin pages reported by rekter0<\/li>\n\n\n\n<li>A Contributor+ stored cross-site scripting (XSS) issue in Customizer selective refresh reported by Rafie Muhammad (Awesome Motive, Inc.)<\/li>\n\n\n\n<li>A Contributor+ stored cross-site scripting (XSS) issue via javascript: URLs in Interactivity API bindings reported by Luis Herranz and multiple independent reporters<\/li>\n\n\n\n<li>A Contributor+ stored cross-site scripting (XSS) issue in the labels of the Comments Pagination and Post Navigation Link blocks reported by Alex Concha of the WordPress Security Team<\/li>\n\n\n\n<li>An issue allowing post content to shadow Script Module data with a matching element ID reported by Weston Ruter<\/li>\n\n\n\n<li>A cross-site scripting (XSS) issue in the Categories block via format string injection reported by Ben Bidner<\/li>\n\n\n\n<li>A hardening fix for unsafe preg_replace() replacements in the Image and Playlist blocks reported by Ben Bidner of the WordPress Security Team<\/li>\n\n\n\n<li>A Contributor+ stored cross-site scripting (XSS) issue via Interactivity API event handler bindings reported by Jon Surrell<\/li>\n\n\n\n<li>An Author+ stored cross-site scripting (XSS) issue in the Interactivity Router via uploaded text files reported by Anas cherni<\/li>\n\n\n\n<li>A Contributor+ stored cross-site scripting (XSS) issue via prototype pollution in Interactivity API context namespaces reported by rekter0<\/li>\n\n\n\n<li>Contributor+ stored cross-site scripting (XSS) and denial of service issues in Interactivity API bindings reported by rekter0, Marcel Karlsson (whoismarcel), Jon Surrell and Alex Concha of the WordPress Security Team<\/li>\n\n\n\n<li>An update to the bundled root certificates due to the eMudhra revocation.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">As a courtesy, these fixes are also available in older affected branches of WordPress. As a reminder, <strong>only the most recent version of WordPress is actively supported.<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>WordPress 7.0 is affected by all 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-7-0-8\/\">Version 7.0.8<\/a> has been released containing fixes for all of them.<\/li>\n\n\n\n<li>WordPress 6.9 is affected by all 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-9-11\/\">Version 6.9.11<\/a> has been released containing fixes for all of them.<\/li>\n\n\n\n<li>WordPress 6.8 is affected by 20 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-8-12\/\">Version 6.8.12<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 6.7 is affected by 20 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-7-11\/\">Version 6.7.11<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 6.6 is affected by 19 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-6-11\/\">Version 6.6.11<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 6.5 is affected by 17 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-5-14\/\">Version 6.5.14<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 6.4 is affected by 17 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-4-14\/\">Version 6.4.14<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 6.3 is affected by 9 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-3-14\/\">Version 6.3.14<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 6.2 is affected by 9 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-2-15\/\">Version 6.2.15<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 6.1 is affected by 9 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-1-16\/\">Version 6.1.16<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 6.0 is affected by 9 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-6-0-18\/\">Version 6.0.18<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 5.9 is affected by 9 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-9-20\/\">Version 5.9.20<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 5.8 is affected by 6 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-8-19\/\">Version 5.8.19<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 5.7 is affected by 6 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-7-21\/\">Version 5.7.21<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 5.6 is affected by 6 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-6-23\/\">Version 5.6.23<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 5.5 is affected by 6 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-5-24\/\">Version 5.5.24<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 5.4 is affected by 6 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-4-25\/\">Version 5.4.25<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 5.3 is affected by 6 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-3-27\/\">Version 5.3.27<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 5.2 is affected by 6 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-2-30\/\">Version 5.2.30<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 5.1 is affected by 6 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-1-28\/\">Version 5.1.28<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 5.0 is affected by 6 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-5-0-31\/\">Version 5.0.31<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 4.9 is affected by 4 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-4-9-35\/\">Version 4.9.35<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 4.8 is affected by 2 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-4-8-34\/\">Version 4.8.34<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 4.7 is affected by 2 of the 22 vulnerabilities. <a href=\"https:\/\/wordpress.org\/documentation\/wordpress-version\/version-4-7-39\/\">Version 4.7.39<\/a> has been released containing fixes.<\/li>\n\n\n\n<li>WordPress 4.6 and earlier no longer receive security updates.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Change log<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">List of files revised<\/h3>\n\n\n\n<pre class=\"wp-block-preformatted\">\/wp-admin\/includes\/ajax-actions.php<br>\/wp-admin\/includes\/class-wp-ms-users-list-table.php<br>\/wp-admin\/includes\/class-wp-privacy-data-export-requests-list-table.php<br>\/wp-admin\/includes\/class-wp-privacy-data-removal-requests-list-table.php<br>\/wp-admin\/includes\/class-wp-privacy-requests-table.php<br>\/wp-admin\/includes\/class-wp-upgrader.php<br>\/wp-admin\/includes\/class-wp-users-list-table.php<br>\/wp-admin\/includes\/ms.php<br>\/wp-admin\/includes\/update-core.php<br>\/wp-admin\/user-edit.php<br>\/wp-admin\/users.php<br>\/wp-content\/themes\/twentytwenty\/assets\/js\/customize-preview.js<br>\/wp-includes\/admin-bar.php<br>\/wp-includes\/assets\/script-loader-packages.php<br>\/wp-includes\/assets\/script-modules-packages.php<br>\/wp-includes\/blocks\/categories.php<br>\/wp-includes\/blocks\/comments-pagination-next.php<br>\/wp-includes\/blocks\/comments-pagination-previous.php<br>\/wp-includes\/blocks\/image.php<br>\/wp-includes\/blocks\/playlist.php<br>\/wp-includes\/blocks\/post-navigation-link.php<br>\/wp-includes\/build\/routes\/connectors-home\/content.js<br>\/wp-includes\/build\/routes\/connectors-home\/content.min.asset.php<br>\/wp-includes\/build\/routes\/connectors-home\/content.min.js<br>\/wp-includes\/class-wp-block-parser.php<br>\/wp-includes\/class-wp-customize-manager.php<br>\/wp-includes\/interactivity-api\/class-wp-interactivity-api.php<br>\/wp-includes\/js\/customize-preview-widgets.js<br>\/wp-includes\/js\/customize-selective-refresh.js<br>\/wp-includes\/kses.php<br>\/wp-includes\/rest-api\/endpoints\/class-wp-rest-comments-controller.php<br>\/wp-signup.php<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">List of packages revised<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">No package was revised.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>On October 28, 2026, WordPress 7.1.4 was released to the public. Installation\/Update Information To get this version, update automatically from the Dashboard &gt; Updates menu in your site&#8217;s admin area or visit https:\/\/wordpress.org\/download\/releases\/.For step-by-step instructions on installing and updating WordPress: Updating WordPress If you are new to WordPress, we recommend that you begin with the [&hellip;]<\/p>\n","protected":false},"author":2097165,"featured_media":0,"menu_order":0,"template":"","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":""},"helphub_major_release":[],"class_list":["post-16371315","helphub_version","type-helphub_version","status-publish","hentry"],"revision_note":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/16371315","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions"}],"about":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/types\/helphub_version"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/users\/2097165"}],"version-history":[{"count":2,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/16371315\/revisions"}],"predecessor-version":[{"id":16371376,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/wordpress-versions\/16371315\/revisions\/16371376"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/media?parent=16371315"}],"wp:term":[{"taxonomy":"helphub_major_release","embeddable":true,"href":"https:\/\/wordpress.org\/documentation\/wp-json\/wp\/v2\/helphub_major_release?post=16371315"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}