On October 6, 2026, WordPress 7.1.3 was released. It is a security and maintenance release, and WordPress recommends updating immediately.
In short
- WordPress 7.1.3 fixes 7 security vulnerabilities and resolves 4 bugs.
- No attacks are known, but updating is necessary.
- Sites with automatic updates will be updated automatically.
What has been fixed?
The update addresses the following vulnerabilities:
- XSS on the Comments page in the admin area, via comments awaiting approval.
- A SQL injection in the export of WordPress (WXR).
- Comments on private and unpublished posts that could be accessed without logging in.
- Users with the Author role who could pin posts (make them sticky).
- XSS via Imgur embeds, and an issue that could unnecessarily overload a server (DoS).
Additionally, there are four bug fixes included. One of them resolved an issue where uploading images failed on some servers.
What should you do?
Do you have a website with WordPress maintenance with us? Then you don’t need to do anything: we keep your site updated with releases like this. If you manage your site yourself, check your dashboard under Dashboard > Updates to see if you are already on 7.1.3.
Unsure if your site is secure? Feel free to send us a message, and we will take a look.
Source: WordPress.org, WordPress 7.1.3 Maintenance and Security Release.
Share this post
Robert Oosterloo
Robert Oosterloo is eigenaar en UX/UI-designer van Lef Creative in Kollum. Hij ontwerpt websites, webshops en software voor ondernemers in Noord-Nederland.
More news
Lef Creative launches EHBOSoftware.nl
Building something great too?
Tell us what you want to achieve. We will think along with you, no strings attached.
Prefer direct contact? Call Robert at 06 35 66 47 73 or send a WhatsApp.