Automattic Wordpress Update Version 7.0.4
Your rating
Rate update installation process
Risk factor
No ratings yet. Be the first to rate this update.
AI enhanced content
Update Summary
WordPress 7.0.4 addresses an authenticated Author-level remote code execution vulnerability involving malicious file uploads on sites using Imagick and Ghostscript. The issue is tracked as CVE-2026-65640 and GHSA-8vr3-7mxf-gx8w.
Update Details
Security
- Fixes authenticated Author-level remote code execution via malicious file upload on sites using Imagick and Ghostscript. References: CVE-2026-65640 and GHSA-8vr3-7mxf-gx8w.
Hints
- Update immediately by downloading WordPress from WordPress.org or using Dashboard → Updates → Update Now.
- Sites supporting automatic background updates will begin updating shortly.
- The security fix is being backported to the 4.7 branch and WordPress 7.1 RC3 as those releases become ready.
Product Information
Vendor: Automattic
Product: Wordpress
Product type: Software
Platform: Web
Version: 7.0.4
Vendor information published: Aug 12, 2026
Original release notes: View on vendor site
Published on updatealert.io: Oct 24, 2026
Description: WordPress is a free and open platform for creating websites and blogs.