{
  "question": "Was today a WordPress security release?",
  "url": "https://was.today/a-wordpress-security-release",
  "verdict": "no",
  "headline": "NO",
  "answer": "No — WordPress's latest security release, 7.1.3, landed on October 6; this week's emergency is in PHP.",
  "details": [
    "Last core security release: WordPress 7.1.3, October 6, 2026",
    "This week's flaw is PHP, not WordPress: CVE-2026-109618 and CVE-2026-109619",
    "Both PHP flaws rated CVSS 9.2; fixed in PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35"
  ],
  "sources": [
    {
      "title": "TZ-CERT",
      "url": "https://tzcert.go.tz/publication/TZCERT-SU-26-4061-wordpress-security-update"
    },
    {
      "title": "WordPress.org",
      "url": "https://wordpress.org/documentation/wordpress-version/version-6-9-10/#1"
    },
    {
      "title": "Debian",
      "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1150336"
    },
    {
      "title": "PCRescue",
      "url": "https://pcrescue.me/blog/pcrescue-newsletter-10-23-2026/"
    },
    {
      "title": "ResearchBuzz: Firehose",
      "url": "https://rbfirehose.com/2026/10/22/wordpress-critical-php-security-release/"
    },
    {
      "title": "Computan",
      "url": "https://www.computan.com/blog/critical-php-vulnerabilities-are-taking-sites-offline-what-wordpress-owners-need-to-do"
    },
    {
      "title": "Security – WordPress News",
      "url": "https://wordpress.org/news/category/security/"
    }
  ],
  "date": "2026-10-24",
  "place": null,
  "permalink": "https://was.today/a-wordpress-security-release/2026-10-24",
  "scope": "global",
  "volatile": true,
  "generatedAt": "2026-10-24T04:04:22.199Z"
}