WordPress Urges Immediate Update After Fixing 11 Security Vulnerabilities
Brief
WordPress has released version 7.
- 1, a security and maintenance update that fixes 11 vulnerabilities affecting the widely used content management system.
Website owners and administrators are urged to install the update immediately to reduce the risk of cross-site scripting, authorization bypass, information disclosure, path traversal, and content manipulation attacks.
The WordPress 7.
- 1 release also includes 17 bug fixes for WordPress Core and 19 fixes for the Block Editor. Sites configured for automatic background updates should begin receiving the patch automatically.
Administrators managing manual updates can install the release through the WordPress Dashboard by opening Updates and selecting Update Now.
The update addresses multiple stored cross-site scripting, or XSS, vulnerabilities. One issue exists in the wpautop() function.