WordPress 7.0.4 Patches Remote Code Execution Vulnerability
Source SecurityWeek
Mentioned vulnerabilities
Fixed in 7.0.4 : patch affected systems soon.
Data as of 13 Aug 2026, 20:37 UTC
Rated High by Threat Radar from the SecurityWeek text
- Patch
- Available – fixed in 7.0.4
What to do
AI-suggested
WordPress 7.0.4 includes an official fix that addresses this vulnerability by adding content checks before passing files to Imagick, preventing PostScript execution. The fix has been backported to all supported branches back to version 4.7. Site administrators should upgrade to WordPress 7.0.4 or later, or apply the backported patches if running older supported versions. No additional mitigation is required once patched.
Description
Attackers with Author-level user or higher permissions could exploit the flaw via malicious Postscript files. The post WordPress 7.0.4 Patches Remote Code Execution Vulnerability appeared first on SecurityWeek .