WordPress 7.0.1 is now available as a short-cycle maintenance release. This update addresses 31 bugs across Core and the Block Editor, including issues in the admin UI and media handling. The article covers how to apply the update and notes the upcoming 7.1 release.
WordPress 7.0.2 is a security release addressing one critical and one high-severity vulnerability. The update fixes a Remote Code Execution flaw in the REST API batch-route and a facilitated SQL injection issue. WordPress.org has enabled forced auto-updates for affected sites.
WordPress 7.0.3 is a security-focused update addressing multiple vulnerabilities, including a pre-auth reflected cross-site scripting (XSS) flaw on the login screen and privilege escalation issues on multisite networks.
WordPress 7.0.4 is a critical security release addressing a Remote Code Execution (RCE) flaw in the Imagick library. Authenticated users with Author+ privileges can exploit this vulnerability via malicious file uploads. Immediate updates are recommended for all sites using Ghostscript and Imagick.
WordPress 7.1, code-named “Mary Lou,” introduces a dedicated media editor, responsive styling tools, and improved accessibility features.
WordPress 7.0, named after Louis Armstrong, introduces a core AI client, a modernized dashboard with a command palette, and new blocks for developers and designers.
