Automattic Wordpress Update Version 6.9.4
Views
9
Your rating
Rate update installation process
Log in to rate this update.
Login
Risk factor
No ratings yet. Be the first to rate this update.
Smooth installs
0%
Minor issues
0%
Major issues
0%
AI enhanced content
Update Summary
WordPress 6.9.4 adds necessary security fixes after some fixes in versions 6.9.2 and 6.9.3 were not fully applied. Immediate updates are recommended.
Update Details
Security
- Fixes a PclZip path traversal vulnerability.
- Fixes an authorization bypass affecting the Notes feature.
- Fixes an XML external entity (XXE) vulnerability in the external getID3 library.
Hints
- Update from the WordPress Dashboard by selecting Updates and then Update Now.
- WordPress can be downloaded from WordPress.org.
- Sites supporting automatic background updates will begin updating automatically.
- Because this is a security release, immediate updating is recommended.
Product Information
Vendor: Automattic
Product: Wordpress
Product type: Software
Platform: Web
Version: 6.9.4
Vendor information published: Mar 11, 2026
Original release notes: View on vendor site
Published on updatealert.io: Oct 24, 2026
Description: WordPress is a free and open platform for creating websites and blogs.