Version 28.0 fixes unknown security issue? | WordPress.org

Resolved puregraphx
(@puregraphx)

3 weeks, 4 days ago

According to the changelog, version 28.0 fixed CVE-2026-12905, but that issue doesn’t even exist in the Patchstack database.

27.8 is the last known version that fixed an issue, CVE-2026-13395

Viewing 3 replies - 1 through 3 (of 3 total)

Plugin Support katebor
(@katebor)

3 weeks ago

Hello,

Thank you for your message.

We received a report about a vulnerability with this CVE number through Wordfence:

https://www.cve.org/CVERecord?id=CVE-2026-12905

Thread Starter puregraphx
(@puregraphx)

3 weeks ago

Wasn’t that fixed in 27.8 ?

Plugin Support katebor
(@katebor)

3 weeks ago

Hello,

Thank you for your message.

27.8 fixed https://www.cve.org/CVERecord?id=CVE-2026-13395
28.0 fixed https://www.cve.org/CVERecord?id=CVE-2026-12905

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.

5 replies
2 participants
Last reply from: katebor
Last activity: 3 weeks ago
Status: resolved