This security release features a fix for a critical severity security vulnerability.
Because this is a security release, it is recommended that you update your sites immediately.
You can download WordPress 7.1.2 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have sites that support automatic background updates, the update process will begin automatically.
Security update included in this release
The security team would like to thank Robert Ressl for responsibly disclosing that an unauthenticated attacker can, under certain conditions, make page template resolution include a chosen readable local PHP file outside the active theme directories. If relevant pre-conditions for both the server environment and the active theme are met, this can lead to remote code execution (RCE).
Thank you to these WordPress contributors
This release was led by John Blackbourn. WordPress 7.1.2 would not have been possible without the contributions of the following people:
Aaron Jorbin, Aki Hamano, Alex Concha, Ehtisham Siddiqui, fiocavallari, Jb Audras, Jeffrey Paul, Jeremy Felt, Joe McGill, John Blackbourn, Lance Willett, Manuel Camargo, marcs0h, martin.krcho, Mukesh Panchal, Olga Gleckler, Pascal Birchler, Peter Wilson, Rajin Sharwar, Ressl, Rudy Faile, Shail Mehta, Stephanie Walters, and vortfu.
CVE and GHSA references
Further details can be found in the advisory: CVE-2026-87902 / GHSA-7hp8-65ch-5whp.
Backports
As a courtesy, the security fix is being backported to all branches eligible to receive security fixes (currently through 4.7). As a reminder, only the most recent version of WordPress is actively supported. The backports are in progress and will ship as they become ready.
Please consider helping!
Awake Freedom TV On Roku is Broken! 🙂

I could no longer maintain the costs on my own, so I moved the off of a dedicated server which was needed for the TV platform to work. On top of that, I want to build an app Awake Freedom TV app, for mobile phones. We need your help to first resurrect our TV channel, and then build the mobile app. In order to do that, I need a minimum of 800/month on subscription payments. Please help anyway you can with the form below.







Leave A Comment