WordPress 7.1.3 Released With Critical Security and Maintenance Fixes
WordPress has rolled out version 7.1.3, a security and maintenance release addressing seven security vulnerabilities and four bugs.
WordPress has announced the release of version 7.1.3, an update featuring seven security fixes and four bug fixes. Due to the inclusion of security patches, users are strongly advised to update their sites immediately.
Site administrators can download the new version directly from the official platform, or initiate the process through the WordPress Dashboard by navigating to updates. Sites with automatic background updates enabled will begin the process automatically.
The security updates address several reported vulnerabilities, including a stored cross-site scripting issue on the comments administration page reported by Thomas Chauchefoin, a denial-of-service issue in the HTTP handling method reported by Anthropic, and a second-order SQL injection in the WXR export feature also reported by Anthropic. Other addressed issues include an author-role weakness regarding sticky posts, unauthenticated comment disclosure on private posts reported by Ananda Dhakal, a vulnerability in Imgur embeds, and a forgeable parameters issue reported by Alex Concha.
The release was led by Jake Spurlock with contributions from numerous developers and researchers coordinating asynchronously to deliver the stable software. As a courtesy, necessary security fixes are being backported to eligible previous branches extending through version 4.7, though officials remind users that only the most recent version receives active support.
