WordPress Security Blog
Weekly vulnerability reports, security tips, and WordPress security news to keep your site safe.
WordPress 7.1 Release Candidate 1
The first Release Candidate (“RC1”) for WordPress 7.1 is ready for download and testing! This version of the WordPress software is still under development.
WordPress Vulnerability Report: July 29 – August 5, 2026
284 WordPress vulnerabilities disclosed between July 29 – August 5, 2026. 24 critical, 54 high severity. 4 patched, 280 unpatched.
WordPress Vulnerability Report: July 28 – August 4, 2026
296 WordPress vulnerabilities disclosed between July 28 – August 4, 2026. 19 critical, 61 high severity. 2 patched, 294 unpatched.
WordPress Vulnerability Report: July 27 – August 3, 2026
287 WordPress vulnerabilities disclosed between July 27 – August 3, 2026. 14 critical, 55 high severity. 2 patched, 285 unpatched.
WordPress Vulnerability Report: July 26 – August 2, 2026
282 WordPress vulnerabilities disclosed between July 26 – August 2, 2026. 19 critical, 63 high severity. 2 patched, 280 unpatched.
WordPress Vulnerability Report: July 25 – August 1, 2026
219 WordPress vulnerabilities disclosed between July 25 – August 1, 2026. 17 critical, 57 high severity. 2 patched, 217 unpatched.
WordPress Vulnerability Report: July 24 – July 31, 2026
198 WordPress vulnerabilities disclosed between July 24 – July 31, 2026. 15 critical, 47 high severity. 2 patched, 196 unpatched.
WordPress Vulnerability Report: July 23 – July 30, 2026
203 WordPress vulnerabilities disclosed between July 23 – July 30, 2026. 18 critical, 48 high severity. 2 patched, 201 unpatched.
WordPress 7.1 Beta 4
WordPress 7.1 Beta 4 is ready for download and testing!  This beta release is intended for testing and development only. Please do not install, run, or test this version of WordPress on production or mission-critical websites.
WordPress Vulnerability Report: July 22 – July 29, 2026
155 WordPress vulnerabilities disclosed between July 22 – July 29, 2026. 13 critical, 42 high severity. 1 patched, 154 unpatched.