WordPress has apparently introduced WordPress 7.0.2, which is an urgent security upgrade that rectifies one very serious vulnerability and one major vulnerability. This is why the WordPress Security team has asked owners of websites to update their sites as soon as possible. In fact, automatic updates have been force-enabled for many affected installations.
If the website is continuing to work on WordPress 7.0.1 or earlier, delaying this upgrade may put the site at serious security risk.
What Vulnerabilities Were Fixed?
According to the release note from the company, WordPress has fixed the following vulnerabilities:
1. Facilitated SQL Injection
The vulnerability enabled attackers to change the solutions for database requests.
2. REST API Batch Route Confusion Leading to Remote Code Execution
The researchers discovered a weakness that occurs when a REST API batch endpoint is used in conjunction with SQL injection. This vulnerability could enable hackers to perform Remote Code Execution.
Fortunately, the problem has been fixed with the release of WordPress version 7.0.2.
Which WordPress Versions Are Affected?
The security fixes have been released for multiple supported WordPress branches.
Patched versions include:
- WordPress 7.0.2
- WordPress 6.9.5
- WordPress 6.8.6
Users should perform the updates available immediately.
Official Release Notes
How MageComp Can Help
Managing WordPress updates across multiple websites can be time-consuming, especially for businesses that rely on their websites every day.
MageComp offers professional WordPress development and support services that ensure your website is secure, updated, and available. From core updates to performance optimization and custom development, MageComp will ensure that your website runs smoothly with little downtime.
Final Thoughts
Security vulnerabilities in a CMS as widely used as WordPress should never be ignored. WordPress 7.0.2 addresses serious vulnerabilities that could put websites at risk if left unpatched.
You need to install this update whether you manage a personal blog, e-commerce site, or business site. If you have enabled automatic updates, please check that the site has been updated. You may also take the strong action of performing the update yourself and keep up with the safe practices of WordPress security, or hire a WordPress Developer.
FAQ
1. What is WordPress 7.0.2?
WordPress 7.0.2 is a serious security update for WordPress and fixes one high-risk and one critical vulnerability.
2. Why should I update immediately?
The vulnerabilities could be abused to attack websites. Therefore, it is imperative to update immediately to safeguard your site from an existing security threat.
