Automattic Wordpress Update Version 7.1.1
Views
11
Your rating
Rate update installation process
Log in to rate this update.
Login
Risk factor
No ratings yet. Be the first to rate this update.
Smooth installs
0%
Minor issues
0%
Major issues
0%
AI enhanced content
Update Summary
WordPress 7.1.1 delivers 11 security fixes, 17 WordPress Core bug fixes, and 19 Block Editor bug fixes. Administrators are urged to update immediately.
Update Details
Security
- Stored cross-site scripting in wpautop() allows unauthenticated visitors to inject scripts, subject to comment approval.
- HTML API set_modifiable_text() could allow breaking out of a comment through abrupt-closing sequences.
- Stored cross-site scripting was fixed in some themes supporting custom headers.
- Specially crafted URLs could automatically install and preview an inactive WordPress.org theme.
- Site Administrators could network-activate an installed Network-only plugin.
- Authenticated path traversal was fixed in the WP REST Templates Controller.
- XML-RPC could publish customize_changeset posts while bypassing edit_css checks.
- Contributors and higher could overwrite arbitrary posts.
- A missing read_post check could disclose a private parent-post title through attachment metadata.
- Missing authorization could disclose draft or pending post slugs to Contributors and higher.
- Authenticated users could reparent comments, including notes.
Bug Fixes
- Includes 17 WordPress Core bug fixes.
- Includes 19 Block Editor bug fixes.
Hints
- Download WordPress 7.1.1 from WordPress.org or update through Dashboard > Updates > Update Now.
- Sites supporting automatic background updates will begin updating automatically.
- This is a short-cycle release; WordPress 7.2 is planned for December.
- Security fixes are being backported, where necessary, to supported branches through WordPress 4.7.
Product Information
Vendor: Automattic
Product: Wordpress
Product type: Software
Platform: Web
Version: 7.1.1
Vendor information published: Sep 17, 2026
Original release notes: View on vendor site
Published on updatealert.io: Oct 24, 2026
Description: WordPress is a free and open platform for creating websites and blogs.