{"id":8,"date":"2026-10-19T03:41:26","date_gmt":"2026-10-19T03:41:26","guid":{"rendered":"https:\/\/minhkhoiweb.com\/?p=8"},"modified":"2026-10-19T03:43:10","modified_gmt":"2026-10-19T03:43:10","slug":"wordpress-7-1-3-maintenance-and-security-release","status":"publish","type":"post","link":"https:\/\/minhkhoiweb.com\/index.php\/2026\/10\/19\/wordpress-7-1-3-maintenance-and-security-release\/","title":{"rendered":"WordPress 7.1.3 Maintenance and Security Release"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">This security and maintenance release features 7 security fixes and <a href=\"https:\/\/core.trac.wordpress.org\/query?milestone=7.1.3&amp;status=closed&amp;order=priority&amp;col=id&amp;col=summary&amp;col=status&amp;col=milestone&amp;col=owner&amp;col=type&amp;col=priority\">4 bug fixes<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Because this is a security release, it is recommended that you update your sites immediately.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You can <a href=\"https:\/\/wordpress.org\/wordpress-7.1.3.zip\">download WordPress 7.1.3 from WordPress.org<\/a>, or visit your WordPress Dashboard, click \u201cUpdates\u201d, and then click \u201cUpdate Now\u201d. If you have sites that support automatic background updates, the update process will begin automatically.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Security updates included in this release<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The security team would like to thank the following people and organizations for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A stored XSS on the Comments administration page, exploitable via pending comments, reported by <a href=\"https:\/\/trailofbits.com\/\">Trail of Bits<\/a> in collaboration with OpenAI.<\/li>\n\n\n\n<li>A DoS issue in the <code>WP_Http::make_absolute_url()<\/code> method, reported by Anthropic<\/li>\n\n\n\n<li>A second-Order SQL injection in WordPress WXR export, reported by Anthropic<\/li>\n\n\n\n<li>A weakness allowing Author role users to sticky posts, reported by Anthropic<\/li>\n\n\n\n<li>Unauthenticated disclosure of comments on private &amp; unpublished posts, reported by <a href=\"https:\/\/patchstack.com\/\">Ananda Dhakal from Patchstack<\/a><\/li>\n\n\n\n<li>Imgur embeds are vulnerable to XSS, reported by <a href=\"https:\/\/jackfromeast.github.io\/\">Zhengyu Liu<\/a>, <a href=\"https:\/\/jesse-yang.com\/\">Jingcheng Yang<\/a>, and <a href=\"https:\/\/gvzhong.github.io\/\">Gavin Zhong<\/a><\/li>\n\n\n\n<li>Forgeable parameters passed to the <code>{status}_{type}<\/code> hook can lead to action name collision, reported by Alex Concha of the WordPress security team<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>This security and maintenance release features 7 security fixes and 4 bug fixes. Because this is a security release, it is recommended that you update your sites immediately.\u2026<\/p>\n","protected":false},"author":1,"featured_media":10,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[1,2],"tags":[],"class_list":["post-8","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cong-nghe-thong-tin","category-tri-tue-nhan-tao","entry"],"_links":{"self":[{"href":"https:\/\/minhkhoiweb.com\/index.php\/wp-json\/wp\/v2\/posts\/8","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/minhkhoiweb.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/minhkhoiweb.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/minhkhoiweb.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/minhkhoiweb.com\/index.php\/wp-json\/wp\/v2\/comments?post=8"}],"version-history":[{"count":1,"href":"https:\/\/minhkhoiweb.com\/index.php\/wp-json\/wp\/v2\/posts\/8\/revisions"}],"predecessor-version":[{"id":11,"href":"https:\/\/minhkhoiweb.com\/index.php\/wp-json\/wp\/v2\/posts\/8\/revisions\/11"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/minhkhoiweb.com\/index.php\/wp-json\/wp\/v2\/media\/10"}],"wp:attachment":[{"href":"https:\/\/minhkhoiweb.com\/index.php\/wp-json\/wp\/v2\/media?parent=8"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/minhkhoiweb.com\/index.php\/wp-json\/wp\/v2\/categories?post=8"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/minhkhoiweb.com\/index.php\/wp-json\/wp\/v2\/tags?post=8"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}