WordPress Security Release (7.1.1)
‼️
Impact: All WordPress sites running 4.7 or above
[ 17 September 2026 at 7:30pmET/2330UTC ] We are writing to inform you of a major WordPress vulnerability impacting versions 4.7 and above. Update your WordPress site to apply the security patch.
What happened?
- Versions of WordPress 4.7 and above are impacted by several vulnerabilities
- These vulnerabilities have the potential to allow attackers to inject arbitrary scripts, modify the site, and bypass security checks
- WordPress has released v7.1.1 to address this and is backporting security fixes to older versions
Current Status
- Patches are being rolled out across all cPanel accounts on Shared Hosting, DoOO, and Managed Hosting, as well as all standalone WordPress and WordPress Multisite setups on Managed Hosting.
Next Steps
- ACTION REQUIRED: Update WordPress to patched versions if the patch has not yet been applied to your site. Patches must be applied by users themselves on self-managed WordPress installations (such as those on Reclaim Cloud).
- For v7.1x, update to v7.1.1 (https://wordpress.org/news/2026/09/wordpress-7-1-1-maintenance-and-security-release/)
- For v7.0x, update to v7.0.5 (https://wordpress.org/documentation/wordpress-version/version-7-0-5/)
- For v6.9x, update to v6.9.8 (https://wordpress.org/documentation/wordpress-version/version-6-9-8/)
- For v6.8x, update to v6.8.9 (https://wordpress.org/documentation/wordpress-version/version-6-8-9/)
- For older versions, either upgrade to v7.0.5 or apply the latest minor update available
- Users/Admins should still check their sites on our Shared Hosting, DoOO, and Managed Hosting servers to ensure the latest update has been applied.
Contact our Support Team
If you have any further questions or need assistance, please contact our support team.
