WordPress & PHP updates
Keep the next update
in view.
Security announcements, release news, and selected vulnerability research from WordPress.org, PHP.net, and Wordfence. Follow the original source and check what applies to your environment.
Saved headlines · Oct 22, 2026, 4:17 AM UTC
- Why It’s Urgent to Update PHP on Your WordPress Site: Two Critical PHP Vulnerabilities and What Our Testing Found (opens publisher website in a new tab)Wordfence WordPress ecosystem
- Critical PHP Security Release (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- Security advisory: Critical remote code execution vulnerabilities, update now (opens publisher website in a new tab)PHP.net PHP
- PHP releases: 8.5.12, 8.4.27, 8.3.36, 8.2.35 (opens publisher website in a new tab)PHP.net PHP
- PSA: Upcoming Critical PHP Security Release (opens publisher website in a new tab)Wordfence WordPress ecosystem
- Upcoming Critical PHP Security Release (opens publisher website in a new tab)PHP.net PHP
- Wordfence Argus Discovers High Severity Unauthenticated PHP Object Injection in Duplicator (opens publisher website in a new tab)Wordfence WordPress ecosystem
- WordPress 7.2 Beta 1 is Ready for Download and Testing (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- Wordfence Intelligence Weekly WordPress Vulnerability Report (October 5, 2026 to October 11, 2026) (opens publisher website in a new tab)Wordfence WordPress ecosystem
- 600,000 WordPress Sites Affected by SQL Injection Vulnerability in Backuply WordPress Plugin (opens publisher website in a new tab)Wordfence WordPress ecosystem
- Wordfence Intelligence Weekly WordPress Vulnerability Report (September 28, 2026 to October 4, 2026) (opens publisher website in a new tab)Wordfence WordPress ecosystem
- PHP 8.6.0 RC3 available for testing (opens publisher website in a new tab)PHP.net PHP
- WordPress 7.1.3 Maintenance and Security Release (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- Wordfence Intelligence Weekly WordPress Vulnerability Report (September 21, 2026 to September 27, 2026) (opens publisher website in a new tab)Wordfence WordPress ecosystem
- Wordfence Intelligence Weekly WordPress Vulnerability Report (September 14, 2026 to September 20, 2026) (opens publisher website in a new tab)Wordfence WordPress ecosystem
- PHP releases: 8.4.26, 8.2.34, 8.5.11, 8.3.35 (opens publisher website in a new tab)PHP.net PHP
- PHP 8.6.0 RC2 available for testing (opens publisher website in a new tab)PHP.net PHP
- PSA: Critical Unauthenticated Path Traversal Vulnerability Patched in WordPress Core (opens publisher website in a new tab)Wordfence WordPress ecosystem
- WordPress 7.1.2 Release (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- Wordfence Argus Discovers Critical Vulnerability in libheif, the Library That Opens iPhone Photos on Your Server (opens publisher website in a new tab)Wordfence WordPress ecosystem
- WordPress 7.1.1 Maintenance and Security Release (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- PHP 8.6.0 Beta 3 is available for testing (opens publisher website in a new tab)PHP.net PHP
- PHP releases: 8.5.10, 8.4.25 (opens publisher website in a new tab)PHP.net PHP
- PHP 8.6.0 Beta 2 available for testing (opens publisher website in a new tab)PHP.net PHP
- WordPress 7.1 “Mary Lou” (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- WordPress 7.0.4 Release (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- WordPress 7.0.3 release (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- WordPress 7.1 Release Candidate 1 (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- WordPress 7.1 Beta 4 (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- WordPress 7.1 Beta 3 (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- WordPress 7.0.2 Release (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- WP23 (opens publisher website in a new tab)WordPress.org WordPress ecosystem
- WordPress 6.9.2 Release (opens publisher website in a new tab)WordPress.org WordPress ecosystem
For WordPress Agencies
Your client relationships.
Our specialist support.
Add PHP security and remediation expertise alongside your team. Coordinate client-site assessments, compatible updates, and white-label support around the way your agency works.
Explore Agency SupportBuilt around your team and your clients.
Ready to protect your sites?
Plan the right support for your PHP sites.
Talk through the situation, clarify priorities, and agree the right technical scope.
Find the Right ConsultationNo obligation. Agency-friendly. White-label options available.