6 articles
WordPress 7.1.3 (October 6, 2026) is a maintenance and security release with 7 security fixes and 4 bug fixes. How home and personal-site owners update via Dashboard → Updates and verify the version.
WordPress 7.1.2 patches critical CVE-2026-87902. Attackers started probing within hours. How personal and small-site owners should update today and confirm the version.
On September 14, 2026 attackers used a stolen Cloudflare API key to inject ClickFix scripts into Brevo CDN responses for about 5.5 hours. Checklist for personal and small WordPress sites that embed Brevo forms or widgets.
WordPress 7.1.1 is a maintenance and security release with 11 security fixes. How personal and small-site owners should update today, what the fixes mean in plain language, and what to confirm after.
Critical unauthenticated RCE (wp2shell) hits WordPress 7.0.0–7.0.1 and 6.9.0–6.9.4. What the CVEs mean, which versions are fixed, and what SMBs should do today.
A repeatable method for finding, owning, classifying, and safely retiring public websites and forgotten subdomains before a vulnerability lands.
