Was October 24, 2026 a WordPress security release?
NO
No — WordPress's latest security release, 7.1.3, landed on October 6; this week's emergency is in PHP.
Why
- Last core security release: WordPress 7.1.3, October 6, 2026
- This week's flaw is PHP, not WordPress: CVE-2026-109618 and CVE-2026-109619
- Both PHP flaws rated CVSS 9.2; fixed in PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35