# WordPress

Latest release: 7.1.3. Known vulnerabilities: 22. Actively exploited: 3. Vendor advisories: [https://wordpress.org/news/category/security/](https://wordpress.org/news/category/security/)

Check any version: https://fixedin.dev/wordpress/{version}.md (for example https://fixedin.dev/wordpress/7.1.3.md).

## Release lines

| Line | Latest | Status | Check |
|---|---|---|---|
| 7.1 | 7.1.3 | supported | https://fixedin.dev/wordpress/7.1.3.md |
| 7.0 | 7.0.7 | supported | https://fixedin.dev/wordpress/7.0.7.md |
| 6.9 | 6.9.10 | supported | https://fixedin.dev/wordpress/6.9.10.md |
| 6.8 | 6.8.11 | supported | https://fixedin.dev/wordpress/6.8.11.md |
| 6.7 | 6.7.10 | supported | https://fixedin.dev/wordpress/6.7.10.md |
| 6.6 | 6.6.10 | supported | https://fixedin.dev/wordpress/6.6.10.md |
| 6.5 | 6.5.13 | supported | https://fixedin.dev/wordpress/6.5.13.md |
| 6.4 | 6.4.13 | supported | https://fixedin.dev/wordpress/6.4.13.md |
| 6.3 | 6.3.13 | supported | https://fixedin.dev/wordpress/6.3.13.md |
| 6.2 | 6.2.14 | supported | https://fixedin.dev/wordpress/6.2.14.md |
| 6.1 | 6.1.15 | supported | https://fixedin.dev/wordpress/6.1.15.md |
| 6.0 | 6.0.17 | supported | https://fixedin.dev/wordpress/6.0.17.md |
| 5.9 | 5.9.19 | supported | https://fixedin.dev/wordpress/5.9.19.md |
| 5.8 | 5.8.18 | supported | https://fixedin.dev/wordpress/5.8.18.md |
| 5.7 | 5.7.20 | supported | https://fixedin.dev/wordpress/5.7.20.md |
| 5.6 | 5.6.22 | supported | https://fixedin.dev/wordpress/5.6.22.md |
| 5.5 | 5.5.23 | supported | https://fixedin.dev/wordpress/5.5.23.md |
| 5.4 | 5.4.24 | supported | https://fixedin.dev/wordpress/5.4.24.md |
| 5.3 | 5.3.26 | supported | https://fixedin.dev/wordpress/5.3.26.md |
| 5.2 | 5.2.29 | supported | https://fixedin.dev/wordpress/5.2.29.md |
| 5.1 | 5.1.27 | supported | https://fixedin.dev/wordpress/5.1.27.md |
| 5.0 | 5.0.30 | supported | https://fixedin.dev/wordpress/5.0.30.md |
| 4.9 | 4.9.34 | supported | https://fixedin.dev/wordpress/4.9.34.md |
| 4.8 | 4.8.33 | supported | https://fixedin.dev/wordpress/4.8.33.md |
| 4.7 | 4.7.38 | supported | https://fixedin.dev/wordpress/4.7.38.md |
| 4.6 | 4.6.30 | end of life since 2025-07-31 | https://fixedin.dev/wordpress/4.6.30.md |
| 4.5 | 4.5.33 | end of life since 2025-07-31 | https://fixedin.dev/wordpress/4.5.33.md |
| 4.4 | 4.4.34 | end of life since 2025-07-31 | https://fixedin.dev/wordpress/4.4.34.md |
| 4.3 | 4.3.35 | end of life since 2025-07-31 | https://fixedin.dev/wordpress/4.3.35.md |
| 4.2 | 4.2.39 | end of life since 2025-07-31 | https://fixedin.dev/wordpress/4.2.39.md |
| 4.1 | 4.1.42 | end of life since 2025-07-31 | https://fixedin.dev/wordpress/4.1.42.md |
| 4.0 | 4.0.38 | end of life since 2022-12-01 | https://fixedin.dev/wordpress/4.0.38.md |
| 3.9 | 3.9.40 | end of life since 2022-12-01 | https://fixedin.dev/wordpress/3.9.40.md |
| 3.8 | 3.8.41 | end of life since 2022-12-01 | https://fixedin.dev/wordpress/3.8.41.md |
| 3.7 | 3.7.41 | end of life since 2022-12-01 | https://fixedin.dev/wordpress/3.7.41.md |
| 3.6 | 3.6.1 | end of life since 2013-10-24 | https://fixedin.dev/wordpress/3.6.1.md |
| 3.5 | 3.5.2 | end of life since 2013-08-01 | https://fixedin.dev/wordpress/3.5.2.md |
| 3.4 | 3.4.2 | end of life since 2012-12-11 | https://fixedin.dev/wordpress/3.4.2.md |
| 3.3 | 3.3.3 | end of life since 2012-06-13 | https://fixedin.dev/wordpress/3.3.3.md |
| 3.2 | 3.2.1 | end of life since 2011-12-12 | https://fixedin.dev/wordpress/3.2.1.md |
| 3.1 | 3.1.4 | end of life since 2011-07-04 | https://fixedin.dev/wordpress/3.1.4.md |
| 3.0 | 3.0.6 | end of life since 2011-02-23 | https://fixedin.dev/wordpress/3.0.6.md |
| 2.9 | 2.9.2 | end of life since 2010-06-17 | https://fixedin.dev/wordpress/2.9.2.md |
| 2.8 | 2.8.6 | end of life since 2009-12-18 | https://fixedin.dev/wordpress/2.8.6.md |
| 2.7 | 2.7.1 | end of life since 2009-09-10 | https://fixedin.dev/wordpress/2.7.1.md |
| 2.6 | 2.6.5 | end of life since 2008-12-10 | https://fixedin.dev/wordpress/2.6.5.md |
| 2.5 | 2.5.1 | end of life since 2008-07-14 | https://fixedin.dev/wordpress/2.5.1.md |
| 2.3 | 2.3.3 | end of life since 2008-03-29 | https://fixedin.dev/wordpress/2.3.3.md |
| 2.2 | 2.2.3 | end of life since 2007-09-24 | https://fixedin.dev/wordpress/2.2.3.md |
| 2.1 | 2.1.3 | end of life since 2007-09-24 | https://fixedin.dev/wordpress/2.1.3.md |
| 2.0 | 2.0.11 | end of life since 2007-08-05 | https://fixedin.dev/wordpress/2.0.11.md |
| 1.5 | 1.5.2 | end of life since 2005-12-26 | https://fixedin.dev/wordpress/1.5.2.md |
| 1.2 | 1.2.1 | end of life since 2005-02-17 | https://fixedin.dev/wordpress/1.2.1.md |
| 1.0 | 1.0.2 | end of life since 2004-05-22 | https://fixedin.dev/wordpress/1.0.2.md |
| 0.72 | 0.72 | end of life since 2004-01-03 | https://fixedin.dev/wordpress/0.72.md |
| 0.71 | 0.711 | end of life since 2003-10-11 | https://fixedin.dev/wordpress/0.711.md |

## Actively exploited

- [CVE-2026-87902](https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp), added to CISA KEV 2026-09-25
- [CVE-2026-60137](https://wordpress.org/news/2026/07/wordpress-7-0-2-release/), added to CISA KEV 2026-07-21
- [CVE-2026-63030](https://wordpress.org/news/2026/07/wordpress-7-0-2-release/), added to CISA KEV 2026-07-21

Data as of: 2026-10-24 16:52 UTC

---

FixedIn gives information, not guarantees. Always confirm with the vendor's advisory before you rely on a result. Source: https://fixedin.dev/wordpress · JSON: https://fixedin.dev/wordpress.json · MCP server: https://fixedin.dev/mcp · About these addresses: https://fixedin.dev/llms.txt