Skip to content

Update WordPress core from 6.9.4 to 7.1.2 - #97

Closed
github-actions[bot] wants to merge 3 commits into
mainfrom
codex/wordpress-core-7-1-20260901163647
Closed

github-actions[bot] wants to merge 3 commits into
mainfrom
codex/wordpress-core-7-1-20260901163647

Conversation

@github-actions

@github-actions github-actions Bot commented Sep 1, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Field Value
Component WordPress core
Installed version on base branch 6.9.4
Target version 7.1.2
Release scope patch
Release timestamp (UTC) 2026-09-22 14:01:20 UTC
Release announcement Open
Download package zip
Blocked by older update PRs None

Derived Labels

  • automation:dependency-update
  • component:wordpress-core
  • release:patch
  • source:wordpress.org
  • type:security-bugfix

Release Notes

This security release features a fix for a critical severity security vulnerability.

Because this is a security release, it is recommended that you update your sites immediately.

You can download WordPress 7.1.2 from WordPress.org, or visit your WordPress Dashboard, click �Updates�, and then click �Update Now�. If you have sites that support automatic background updates, the update process will begin automatically.

Security update included in this release

The security team would like to thank Robert Ressl for responsibly disclosing that an unauthenticated attacker can, under certain conditions, make page template resolution include a chosen readable local PHP file outside the active theme directories. If relevant pre-conditions for both the server environment and the active theme are met, this can lead to remote code execution (RCE).

Artifact Provenance

Field Value
Trust state verified
Provenance details WordPress core files were verified against official checksums before apply.

Automation Notes

  • This PR is managed by the WordPress core updater automation.
  • Archive authenticity was independently verified before apply.
  • If a newer patch release lands on the same release line before merge, this PR will be updated in place.
  • If a newer minor or major release lands before merge, the automation will open a separate blocked PR.

@github-actions github-actions Bot added component:wordpress-core WordPress core update source:wordpress.org Update sourced from WordPress.org release:major Major release type:feature Contains feature work automation:dependency-update Managed dependency update PR labels Sep 1, 2026
Comment thread wp-includes/js/dist/annotations.js Dismissed
@@ -561,7 +528,7 @@
load.blobUrl = createBlob(resolvedSource);
load.source = void 0;
}
const sourceMapURLRegEx = /\n\/\/# source(Mapping)?URL=([^\n]+)\s*((;|\/\/[^#][^\n]*)\s*)*$/;
var sourceMapURLRegEx = /\n\/\/# source(Mapping)?URL=([^\n]+)\s*((;|\/\/[^#][^\n]*)\s*)*$/;
Comment thread wp-includes/js/jquery/ui/dialog.js Dismissed
Comment thread wp-includes/js/wp-sanitize.js Dismissed
Comment thread wp-includes/js/dist/annotations.js Dismissed
Comment thread wp-includes/js/dist/annotations.js Dismissed
Comment thread wp-includes/js/dist/block-serialization-default-parser.js Dismissed
Comment thread wp-includes/js/jquery/ui/dialog.js Dismissed
@github-actions github-actions Bot changed the title Update WordPress core from 6.9.4 to 7.1 Update WordPress core from 6.9.4 to 7.1.1 Sep 17, 2026
@github-actions github-actions Bot added release:patch Patch release type:security-bugfix Contains security or bugfix work and removed release:major Major release type:feature Contains feature work labels Sep 17, 2026
@github-actions github-actions Bot changed the title Update WordPress core from 6.9.4 to 7.1.1 Update WordPress core from 6.9.4 to 7.1.2 Sep 22, 2026
@github-actions
github-actions Bot deleted the codex/wordpress-core-7-1-20260901163647 branch September 25, 2026 09:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automation:dependency-update Managed dependency update PR component:wordpress-core WordPress core update release:patch Patch release source:wordpress.org Update sourced from WordPress.org type:security-bugfix Contains security or bugfix work

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants