{"id":6014,"date":"2026-10-06T19:46:15","date_gmt":"2026-10-06T17:46:15","guid":{"rendered":"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/"},"modified":"2026-10-06T19:46:15","modified_gmt":"2026-10-06T17:46:15","slug":"wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release","status":"publish","type":"post","link":"https:\/\/www.caderas-martin.com\/en\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/","title":{"rendered":"WordPress.org blog: WordPress 7.1.3 Maintenance and Security Release"},"content":{"rendered":"<p class=\"wp-block-paragraph\">This security and maintenance release features 7 security fixes and <a href=\"https:\/\/core.trac.wordpress.org\/query?milestone=7.1.3&amp;status=closed&amp;order=priority&amp;col=id&amp;col=summary&amp;col=status&amp;col=milestone&amp;col=owner&amp;col=type&amp;col=priority\">4 bug fixes<\/a>.<\/p>\n<p class=\"wp-block-paragraph\"><strong>Because this is a security release, it is recommended that you update your sites immediately.<\/strong><\/p>\n<p class=\"wp-block-paragraph\">You can <a href=\"https:\/\/wordpress.org\/wordpress-7.1.3.zip\">download WordPress 7.1.3 from WordPress.org<\/a>, or visit your WordPress Dashboard, click \u201cUpdates\u201d, and then click \u201cUpdate Now\u201d. If you have sites that support automatic background updates, the update process will begin automatically.<\/p>\n<h2 class=\"wp-block-heading\">Security updates included in this release<\/h2>\n<p class=\"wp-block-paragraph\">The security team would like to thank the following people and organizations for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:<\/p>\n<ul class=\"wp-block-list\">\n<li>A stored XSS on the Comments administration page, exploitable via pending comments, reported by <a href=\"https:\/\/trailofbits.com\/\">Thomas Chauchefoin at Trail of Bits<\/a><\/li>\n<li>A DoS issue in the <code>WP_Http::make_absolute_url()<\/code> method, reported by Anthropic<\/li>\n<li>A second-Order SQL injection in WordPress WXR export, reported by Anthropic<\/li>\n<li>A weakness allowing Author role users to sticky posts, reported by Anthropic<\/li>\n<li>Unauthenticated disclosure of comments on private &amp; unpublished posts, reported by <a href=\"https:\/\/patchstack.com\/\">Ananda Dhakal from Patchstack<\/a><\/li>\n<li>Imgur embeds are vulnerable to XSS, reported by <a href=\"https:\/\/jackfromeast.github.io\/\">Zhengyu Liu<\/a>, <a href=\"https:\/\/jesse-yang.com\/\">Jingcheng Yang<\/a>, and <a href=\"https:\/\/gvzhong.github.io\/\">Gavin Zhong<\/a><\/li>\n<li>Forgeable parameters passed to the <code>{status}_{type}<\/code> hook can lead to action name collision, reported by Alex Concha of the WordPress security team<\/li>\n<\/ul>\n<h2 class=\"wp-block-heading\">Thank you to these WordPress contributors<\/h2>\n<p class=\"wp-block-paragraph\">This release was led by <a href=\"https:\/\/profiles.wordpress.org\/whyisjake\/\">Jake Spurlock<\/a>.<\/p>\n<p class=\"wp-block-paragraph\">WordPress 7.1.3 would not have been possible without the contributions of the following people. Their asynchronous coordination to deliver maintenance and security fixes into a stable release is a testament to the power and capability of the WordPress community.<\/p>\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/w.org\/@jorbin\">Aaron Jorbin<\/a>,\u00a0<a href=\"https:\/\/w.org\/@adamsilverstein\">Adam Silverstein<\/a>,\u00a0<a href=\"https:\/\/w.org\/@adrianmoldovanwp\">Adi Moldovan<\/a>,\u00a0<a href=\"https:\/\/w.org\/@adrianduffell\">Adrian Duffell<\/a>,\u00a0<a href=\"https:\/\/w.org\/@xknown\">Alex Concha<\/a>,\u00a0<a href=\"https:\/\/w.org\/@arkaprabhachowdhury\">Arkaprabha Chowdhury<\/a>,\u00a0<a href=\"https:\/\/w.org\/@iamchitti\">Deepak Kumar<\/a>,\u00a0<a href=\"https:\/\/w.org\/@donniam\">donniam<\/a>,\u00a0<a href=\"https:\/\/w.org\/@ehtis\">Ehtisham Siddiqui<\/a>,\u00a0<a href=\"https:\/\/w.org\/@whyisjake\">Jake Spurlock<\/a>,\u00a0<a href=\"https:\/\/w.org\/@audrasjb\">Jb Audras<\/a>,\u00a0<a href=\"https:\/\/w.org\/@jeremyfelt\">Jeremy Felt<\/a>,\u00a0<a href=\"https:\/\/w.org\/@joedolson\">Joe Dolson<\/a>,\u00a0<a href=\"https:\/\/w.org\/@johnbillion\">John Blackbourn<\/a>,\u00a0<a href=\"https:\/\/w.org\/@jonsurrell\">Jon Surrell<\/a>,\u00a0<a href=\"https:\/\/w.org\/@desrosj\">Jonathan Desrosiers<\/a>,\u00a0<a href=\"https:\/\/w.org\/@kgagne\">Ken Gagne<\/a>,\u00a0<a href=\"https:\/\/w.org\/@khokansardar\">Khokan Sardar<\/a>,\u00a0<a href=\"https:\/\/w.org\/@lancewillett\">Lance Willett<\/a>,\u00a0<a href=\"https:\/\/w.org\/@lucatume\">lucatume<\/a>,\u00a0<a href=\"https:\/\/w.org\/@marcs0h\">marcs0h<\/a>,\u00a0<a href=\"https:\/\/w.org\/@peterwilsoncc\">Peter Wilson<\/a>,\u00a0<a href=\"https:\/\/w.org\/@pkevan\">pkevan<\/a>,\u00a0<a href=\"https:\/\/w.org\/@therssoftware\">RS Software<\/a>,\u00a0<a href=\"https:\/\/w.org\/@rfaile313\">Rudy Faile<\/a>,\u00a0<a href=\"https:\/\/w.org\/@sergeybiryukov\">Sergey Biryukov<\/a>,\u00a0<a href=\"https:\/\/w.org\/@siliconforks\">siliconforks<\/a>,\u00a0<a href=\"https:\/\/w.org\/@smerriman\">smerriman<\/a>,\u00a0<a href=\"https:\/\/w.org\/@sabernhardt\">Stephen Bernhardt<\/a>,\u00a0<a href=\"https:\/\/w.org\/@suryakantupadhyay\">Suryakant Upadhyay<\/a>,\u00a0<a href=\"https:\/\/w.org\/@vortfu\">vortfu<\/a>,\u00a0<a href=\"https:\/\/w.org\/@webverts\">webVerts<\/a>,\u00a0<a href=\"https:\/\/w.org\/@westonruter\">Weston Ruter<\/a>,\u00a0<a href=\"https:\/\/w.org\/@yogeshbhutkar\">Yogesh Bhutkar<\/a><\/p>\n<h2 class=\"wp-block-heading\">Backports<\/h2>\n<p class=\"wp-block-paragraph\">As a courtesy, the security fixes are being backported, where necessary, to all branches eligible to receive security fixes (currently through 4.7). As a reminder, <strong>only the most recent version of WordPress is actively supported<\/strong>. The backports are in progress and will ship as they become ready.<\/p>\n<h2 class=\"wp-block-heading\">How to contribute<\/h2>\n<p class=\"wp-block-paragraph\">To get involved in WordPress core development, head over to Trac, <a href=\"https:\/\/core.trac.wordpress.org\/report\/6\">pick a ticket<\/a>, and join the conversation in the <a href=\"https:\/\/wordpress.slack.com\/archives\/C02RQBWTW\">#core<\/a> channel. Need help? Check out the <a href=\"https:\/\/make.wordpress.org\/core\/handbook\/\">Core Contributor Handbook<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p class=\"wp-block-paragraph\">This security and maintenance release features 7 security fixes and <a href=\"https:\/\/core.trac.wordpress.org\/query?milestone=7.1.3&amp;status=closed&amp;order=priority&amp;col=id&amp;col=summary&amp;col=status&amp;col=milestone&amp;col=owner&amp;col=type&amp;col=priority\">4 bug fixes<\/a>.<\/p>\n<p class=\"wp-block-paragraph\">Because this is a security release,<\/p>\n<p><a class=\"readmore\" href=\"https:\/\/www.caderas-martin.com\/en\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/\">Read more<\/a><\/p>\n","protected":false},"author":10,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-6014","post","type-post","status-publish","format-standard","hentry","category-non-classifiee"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>WordPress.org blog: WordPress 7.1.3 Maintenance and Security Release - Cabinet Caderas Martin<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"WordPress.org blog: WordPress 7.1.3 Maintenance and Security Release - Cabinet Caderas Martin\" \/>\n<meta property=\"og:description\" content=\"This security and maintenance release features 7 security fixes and 4 bug fixes. Because this is a security release, Read more\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/\" \/>\n<meta property=\"og:site_name\" content=\"Cabinet Caderas Martin\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-06T17:46:15+00:00\" \/>\n<meta name=\"author\" content=\"Robin CUELLAR\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Robin CUELLAR\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\\\/\"},\"author\":{\"name\":\"Robin CUELLAR\",\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/#\\\/schema\\\/person\\\/eacf6de7c4ea2a19915c1067a8ae2648\"},\"headline\":\"WordPress.org blog: WordPress 7.1.3 Maintenance and Security Release\",\"datePublished\":\"2026-10-06T17:46:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\\\/\"},\"wordCount\":394,\"publisher\":{\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/#organization\"},\"articleSection\":[\"Non classifi\u00e9(e)\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\\\/\",\"url\":\"https:\\\/\\\/www.caderas-martin.com\\\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\\\/\",\"name\":\"WordPress.org blog: WordPress 7.1.3 Maintenance and Security Release - Cabinet Caderas Martin\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/#website\"},\"datePublished\":\"2026-10-06T17:46:15+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.caderas-martin.com\\\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.caderas-martin.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"WordPress.org blog: WordPress 7.1.3 Maintenance and Security Release\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/#website\",\"url\":\"https:\\\/\\\/www.caderas-martin.com\\\/\",\"name\":\"Cabinet Caderas Martin\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.caderas-martin.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/#organization\",\"name\":\"Cabinet Caderas Martin\",\"url\":\"https:\\\/\\\/www.caderas-martin.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.caderas-martin.com\\\/wp-content\\\/uploads\\\/logo_caderas.jpg\",\"contentUrl\":\"https:\\\/\\\/www.caderas-martin.com\\\/wp-content\\\/uploads\\\/logo_caderas.jpg\",\"width\":699,\"height\":224,\"caption\":\"Cabinet Caderas Martin\"},\"image\":{\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.caderas-martin.com\\\/#\\\/schema\\\/person\\\/eacf6de7c4ea2a19915c1067a8ae2648\",\"name\":\"Robin CUELLAR\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a7380e304564b158ce77654667b41e412fab69daebf3e44ff3d276cb0da11a82?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a7380e304564b158ce77654667b41e412fab69daebf3e44ff3d276cb0da11a82?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a7380e304564b158ce77654667b41e412fab69daebf3e44ff3d276cb0da11a82?s=96&d=mm&r=g\",\"caption\":\"Robin CUELLAR\"},\"sameAs\":[\"https:\\\/\\\/comptoir-du-web.fr\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"WordPress.org blog: WordPress 7.1.3 Maintenance and Security Release - Cabinet Caderas Martin","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/","og_locale":"en_US","og_type":"article","og_title":"WordPress.org blog: WordPress 7.1.3 Maintenance and Security Release - Cabinet Caderas Martin","og_description":"This security and maintenance release features 7 security fixes and 4 bug fixes. Because this is a security release, Read more","og_url":"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/","og_site_name":"Cabinet Caderas Martin","article_published_time":"2026-10-06T17:46:15+00:00","author":"Robin CUELLAR","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Robin CUELLAR","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/#article","isPartOf":{"@id":"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/"},"author":{"name":"Robin CUELLAR","@id":"https:\/\/www.caderas-martin.com\/#\/schema\/person\/eacf6de7c4ea2a19915c1067a8ae2648"},"headline":"WordPress.org blog: WordPress 7.1.3 Maintenance and Security Release","datePublished":"2026-10-06T17:46:15+00:00","mainEntityOfPage":{"@id":"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/"},"wordCount":394,"publisher":{"@id":"https:\/\/www.caderas-martin.com\/#organization"},"articleSection":["Non classifi\u00e9(e)"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/","url":"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/","name":"WordPress.org blog: WordPress 7.1.3 Maintenance and Security Release - Cabinet Caderas Martin","isPartOf":{"@id":"https:\/\/www.caderas-martin.com\/#website"},"datePublished":"2026-10-06T17:46:15+00:00","breadcrumb":{"@id":"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.caderas-martin.com\/wordpress-org-blog-wordpress-7-1-3-maintenance-and-security-release\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.caderas-martin.com\/en\/"},{"@type":"ListItem","position":2,"name":"WordPress.org blog: WordPress 7.1.3 Maintenance and Security Release"}]},{"@type":"WebSite","@id":"https:\/\/www.caderas-martin.com\/#website","url":"https:\/\/www.caderas-martin.com\/","name":"Cabinet Caderas Martin","description":"","publisher":{"@id":"https:\/\/www.caderas-martin.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.caderas-martin.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.caderas-martin.com\/#organization","name":"Cabinet Caderas Martin","url":"https:\/\/www.caderas-martin.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.caderas-martin.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.caderas-martin.com\/wp-content\/uploads\/logo_caderas.jpg","contentUrl":"https:\/\/www.caderas-martin.com\/wp-content\/uploads\/logo_caderas.jpg","width":699,"height":224,"caption":"Cabinet Caderas Martin"},"image":{"@id":"https:\/\/www.caderas-martin.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.caderas-martin.com\/#\/schema\/person\/eacf6de7c4ea2a19915c1067a8ae2648","name":"Robin CUELLAR","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/a7380e304564b158ce77654667b41e412fab69daebf3e44ff3d276cb0da11a82?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a7380e304564b158ce77654667b41e412fab69daebf3e44ff3d276cb0da11a82?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a7380e304564b158ce77654667b41e412fab69daebf3e44ff3d276cb0da11a82?s=96&d=mm&r=g","caption":"Robin CUELLAR"},"sameAs":["https:\/\/comptoir-du-web.fr\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.caderas-martin.com\/en\/wp-json\/wp\/v2\/posts\/6014","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.caderas-martin.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.caderas-martin.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.caderas-martin.com\/en\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.caderas-martin.com\/en\/wp-json\/wp\/v2\/comments?post=6014"}],"version-history":[{"count":0,"href":"https:\/\/www.caderas-martin.com\/en\/wp-json\/wp\/v2\/posts\/6014\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.caderas-martin.com\/en\/wp-json\/wp\/v2\/media?parent=6014"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.caderas-martin.com\/en\/wp-json\/wp\/v2\/categories?post=6014"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.caderas-martin.com\/en\/wp-json\/wp\/v2\/tags?post=6014"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}