For more information, please visit the WordPress 7.0.3 HelpHub site<\/a>.<\/p>\n The security team would like to thank the following people for responsibly reporting vulnerabilities and allowing them to be fixed in this release:<\/p>\n As a courtesy, these fixes are being backported, where necessary, to all branches eligible to receive security fixes (currently through 4.7). As a reminder, only the most recent version of WordPress is actively supported<\/strong>. The backports are in progress and will ship as they become ready.<\/p>\n WordPress 7.1 RC2 has also been released, containing all applicable fixes.<\/p>\n Details of the login screen XSS vulnerability can be found in the advisory: CVE-2026-64638 \/ GHSA-52p2-r8wf-jcrf<\/a>.<\/p>\n This release was led by John Blackbourn<\/a>. In addition to the security researchers mentioned above, WordPress 7.0.3 and its backports would not have been possible without the significant contributions of the following people: WordPress 7.0.3 is now available WordPress 7.0.3 is now available which features several security fixes. Because this is a security release, it is recommended that you update your sites immediately. You can update to WordPress 7.0.3 by downloading it from \u0645\u0632\u06cc\u062f \u067e\u0691\u06be\u06cc\u06ba<\/a><\/p>\n","protected":false},"author":1,"featured_media":2598,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2597","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-pakistan"],"_links":{"self":[{"href":"https:\/\/mailurdu.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2597","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mailurdu.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mailurdu.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mailurdu.co.uk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mailurdu.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2597"}],"version-history":[{"count":0,"href":"https:\/\/mailurdu.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2597\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mailurdu.co.uk\/index.php?rest_route=\/wp\/v2\/media\/2598"}],"wp:attachment":[{"href":"https:\/\/mailurdu.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2597"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mailurdu.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2597"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mailurdu.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2597"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Security updates included in this release<\/h2>\n
\n
Backports<\/h2>\n
CVE and GHSA references<\/h2>\n
Thank you to these WordPress contributors<\/h2>\n
Aaron D. Campbell<\/a>, Aaron Jorbin<\/a>, Adam Silverstein<\/a>, adrianmoldovanwp<\/a>, Aki Hamano<\/a>, Alex Concha<\/a>, Andrew Duthie<\/a>, Andrew Serong<\/a>, annezazu<\/a>, Barry<\/a>, Bernie Reiter<\/a>, Daniel<\/a>, Daniel Richards<\/a>, David Bi\u0148ovec<\/a>, Dennis Snell<\/a>, Ehtisham Siddiqui<\/a>, Erwan Le Rousseau<\/a>, Fabian Kaegy<\/a>, fiocavallari<\/a>, George Mamadashvili<\/a>, gubser<\/a>, Isabel Brison<\/a>, Jarda Snajdr<\/a>, Jb Audras<\/a>, Jeremy Felt<\/a>, Joe Dolson<\/a>, Joe Hoyle<\/a>, John Blackbourn<\/a>, Jon Surrell<\/a>, Jonathan Desrosiers<\/a>, Khokan Sardar<\/a>, Lance Willett<\/a>, lucasbustamante<\/a>, lucatume<\/a>, Marco Ciampini<\/a>, Marin Atanasov<\/a>, Mohammad Jangda<\/a>, Mukesh Panchal<\/a>, Paul Kevan<\/a>, Peter Wilson<\/a>, ramonopoly<\/a>, SergeyBiryukov<\/a>, vortfu<\/a>, Weston Ruter<\/a><\/p>\n![\"WordCamp](\"https:\/\/i0.wp.com\/wordpress.org\/news\/files\/2026\/06\/wcus-2026-teaser.png?resize=1024%2C321&ssl=1\")
<\/a>