WordPress Security Updates Are Here: What Site Owners Need to Know This Week

If you run a WordPress site, this week’s updates matter. WordPress has shipped two quick releases in September, and one of them is urgent.

WordPress 7.1.2 (September 22)
This security release fixes a critical severity vulnerability, and site owners are advised to update immediately. You can update from Dashboard → Updates → Update Now. Sites with automatic background updates enabled will start updating on their own. WordPressWordPress

WordPress 7.1.1 (September 17)
This release included 17 core bug fixes, 19 Block Editor fixes, and 11 security fixes. Together with 7.1.2, it makes this a busy month for security. WordPress

What’s new in the editor
Recent release notes mention that visual revisions now support shareable URLs and a code diff view, and List View performance on large posts improved dramatically. For content teams, this means faster editing and easier review of changes. Releases

What’s coming next
WordPress 7.2 Beta 1 is scheduled for October 20-22, with the final release expected between December 8-10. Developers should also note that the Code Reference now runs examples in the browser, and there are deprecations to address before 7.2. WordPressGitHub

Your quick checklist

  1. Back up your site.
  2. Update WordPress core to 7.1.2.
  3. Update plugins and themes.
  4. Remove plugins you no longer use.
  5. Turn on automatic updates and two-factor login.

Most breaches come from outdated plugins and weak logins rather than WordPress core itself, so regular maintenance is your best defense.