How to Update to WordPress 7.1.3 Maintenance and Security Release

This post, updated with each new WordPress release, will note any specific recommendations for each. If applicable, I’ll provide additional insight into new features and functionality. I’ll also include some WordPress backup tips, updates, and other recommendations for your consideration.

Bookmark this article (Press Ctrl + D to Bookmark this page) so you can return each time there is a new WordPress release.

WordPress 7.1.3 Maintenance and Security Release

October 6, 2026: This security and maintenance release features 7 security fixes and 4 bug fixes.

Because this is a security release, it is recommended that you update your sites immediately.

To be fixed in this release:

A stored XSS on the Comments administration page, exploitable via pending comments.
A DoS issue in the WP_Http::make_absolute_url() method, reported by Anthropic
A second-Order SQL injection in WordPress WXR export, reported by Anthropic
A weakness allowing Author role users to sticky posts, reported by Anthropic
Unauthenticated disclosure of comments on private & unpublished posts.
Imgur embeds are vulnerable to XSS.
Forgeable parameters passed to the {status}_{type} hook can lead to action name collision, reported by Alex Concha of the WordPress security team

WordPress 7.1.2 Security Release

September 22, 2026: This security release features a fix for a critical-severity security vulnerability.

Because this is a security release, you are advised to update your sites immediately.

You can download WordPress 7.1.2 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have sites that support automatic background updates, the update process will begin automatically.

WordPress 7.1.1 Maintenance and Security Release

September 17, 2026: This security and maintenance release includes 17 bug fixes for Core, 19 for the Block Editor, and 11 security fixes.

Because this is a security release, it is recommended that you update your sites immediately.

You can download WordPress 7.1.1 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have sites that support automatic background updates, the update process will begin automatically.

WordPress 7.1 Details

The admin bar now follows you throughout the admin experience, keeping the tools you need within reach, whether you’re writing a post or editing your site’s design.
Built-in responsive styling, added to the current show/hide options for blocks, means you can ensure your site looks exactly how you want across screen sizes, without custom CSS.
A new media editor keeps the familiar Crop button as the entry point and brings freeform and aspect-ratio cropping, horizontal and vertical flipping, fine-grained and snap rotation, and metadata editing into a single dedicated workflow.
Leave Notes anywhere in your content—no longer limited to the block level. Rich text support and @mentions make it easier to collaborate with others as you write.
Two new blocks, Playlist and Tabs, along with a new API to register your own set of icons for the Icon block, give you even more flexibility to build what you want without additional plugins.

Get all the nitty-gritty here — this is a big release with many changes you need to be aware of.

Read the WordPress 7.1 Release Notes for information on installation, enhancements, fixed issues, release contributors, learning resources, and the list of file changes.

Explore the WordPress 7.1 Field Guide. Learn about the changes in this release with detailed developer notes to help you build with WordPress.

WordPress 7.0.4 Security Release

August 12, 2026: WordPress 7.0.4 is now available and includes a security fix. Because this is a security release, you should update your sites immediately.

For more information, please visit the WordPress 7.0.4 HelpHub site.

WordPress 7.0.3 Security Release

August 6, 2026: WordPress 7.0.3 is now available and includes several security fixes. Because this is a security release, you should update your sites immediately.

For more information, please visit the WordPress 7.0.3 HelpHub site.

WordPress 7.0.2 Security Release

July 17, 2026: The 7.0.2 security release addresses one critical and one high-severity security issue. Because this is a security release, you should update your sites immediately.

For more information on this release, please visit the HelpHub site.

WordPress 7.0.1 Maintenance Release

July 9, 2026: This minor release includes fixes for 31 bugs throughout Core and the Block Editor, addressing issues affecting multiple areas of WordPress, including the block editor, admin ui, and media. For a full list of bug fixes, please refer to the release candidate announcement.

For more information on this release, please visit the HelpHub site.

WordPress 7.0

May 20, 2026: WordPress 7.0 marks the start of a new era, laying the foundation for AI across the WordPress experience. With a modern, more intuitive dashboard, 7.0 introduces enhanced customization and development tools that inspire creativity and tap into endless potential.

Highlights of WordPress 7.0

AI-Integrated WordPress
Modernized Dashboard
New blocks, block supports, and design tools that add visual agility and granular control while keeping every element of your website on-brand with fresh touches.
Enhanced responsiveness controls.

Details here.

Where to Learn More

For more information on this release, please visit the WordPress 7.0 Field Guide.

Learn WordPress is a free resource for new and experienced WordPress users. It is stocked with how-to videos on using various WordPress features, interactive workshops to explore topics in depth, and lesson plans to dive deeper into specific areas of WordPress.

WordPress Hosting Recommendations:

PHP version 8.3 or greater.
MySQL 8.0+ or MariaDB 10.6+.
HTTPS support.
Apache or Nginx is recommended as the most robust and feature-rich server for running WordPress, but any server that supports PHP and MySQL will do.

Running on legacy versions?

WordPress will still run on PHP 7.2.24+ and MySQL 5.5.5+, but those versions have reached official End of Life and may expose your site to security vulnerabilities. Upgrading is strongly recommended.

BEFORE UPDATING WORDPRESS

WARNING: The upgrade will affect all files and folders in the main WordPress installation, including the core files that run WordPress. If you have made any changes to those files, your changes will be lost.

WordPress Updating Tips

IMPORTANT for WP 7.1

A few simple steps can save you some headaches when updating WordPress themes or plugins. First, double-check with theme and plugin developers BEFORE updating to ensure they have tested the latest version of WordPress.

You want to review whether they have any concerns or comments about your theme and the new version. For example, some theme shops may ask you to delay updating if their testing reveals issues that need to be addressed first.

Your theme developer may advise you to update your theme before updating WordPress. The benefit of using a high-quality premium theme and plugins is that the developer(s) are always on top of this.

If you’re unsure how an update will impact your current website setup, you can run a dry run in your staging area. For more information, check out my article “What’s a Staging Site and Why Do I Need One?”

Step-by-Step WordPress Update Instructions

How to safely and easily update to the latest WordPress version.

It is not just WordPress…

Don’t forget to update your plugins as required. With each WordPress update, you’ll see that plugin developers also update their plugins, and you can update them with one click. Additionally, you’ll see a notification bar under the plugin name in the plugins area, featuring a link labeled “Update now.”

After an update, you have several options if something doesn’t work as expected.

Quickly restore to your last backup. Managed WordPress hosting providers make this easy.
Troubleshoot for conflicts. I have an article titled “How to Troubleshoot Your WordPress Website for Conflicts Easily.”

When it comes to plugins, if the developer is not testing their plugin with the latest WordPress version, consider finding another plugin whose developer is up to date with these updates.

Always Back Up and Update Promptly

To help you safely and efficiently update to the latest version of WordPress, check out my article, “Quick and Easy WordPress Backup Tips.”

Updating should not be ignored or put off. Every update includes security hardening, so hackers always target unmaintained sites. However, for major updates like 7.0, I usually like to hold off for a couple of days to see if any bugs rear their ugly heads once WordPress is out in the wild.

That said, I generally wait a day or two (if it’s not an emergency security update) to let any bugs that can be discovered once the new version is out in the wild. It is not uncommon to see maintenance releases come shortly after a primary release due to unforeseen issues. Let’s face it: There is no way to test for 100% of the environments and combinations on the millions of WordPress websites.

When you promptly apply WordPress updates and stay up to date with premium theme and plugin updates, you stay current with technology and ensure your website is secure and has the best chance of running error-free.

At your service,