The 7.0.2 security release addresses one critical and one high severity security issue.<\/p>\n
Because this is a security release, it is recommended that you update your sites immediately.<\/strong> Due to the severity, the WordPress.org team have enabled forced updates via the auto-update system for sites running affected versions.<\/p>\n To manually update you can visit your WordPress Dashboard, click \u201cUpdates\u201d, and then click \u201cUpdate Now\u201d, or you can download WordPress 7.0.2 from WordPress.org<\/a>. On sites that support automatic background updates, the update process will begin automatically.<\/p>\n The security team would like to thank the following people for responsibly reporting<\/a> vulnerabilities and allowing them to be fixed in this release:<\/p>\n For more information on this release, please visit the HelpHub site<\/a>.<\/p>\n This release was led by John Blackbourn<\/a> and Barry Abrahamson<\/a>. In addition to the security researchers mentioned above, WordPress 7.0.2 would not have been possible without the significant contributions of the following people: Aaron Jorbin<\/a>, Alex Concha<\/a>, annezazu<\/a>, Barry<\/a>, David Baumwald<\/a>, Dominik Schilling<\/a>, Ehtisham Siddiqui<\/a>, Joe Dolson<\/a>, Joe Hoyle<\/a>, John Blackbourn<\/a>, Jonathan Desrosiers<\/a>, Marius L. J.<\/a>, Matt Mullenweg<\/a>, Mohammad Jangda<\/a>, Peter Wilson<\/a>, Sergey Biryukov<\/a>, vortfu<\/a>, Weston Ruter<\/a>, plus representatives from Altis, Automattic, Bluehost, Cloudflare, GoDaddy, Hostinger, and WP Engine.<\/p>\n \n<\/p>","protected":false},"excerpt":{"rendered":" WordPress 7.0.2 is now available. The 7.0.2 security release addresses one critical and one high severity security issue. Because this is a security release, it is recommended that you update your sites immediately. Due to the severity, the WordPress.org team have enabled forced updates via the auto-update system for sites running affected versions. To manually […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[1],"tags":[],"class_list":["post-5861","post","type-post","status-publish","format-standard","hentry","category-latest-news"],"jetpack_featured_media_url":"","jetpack_likes_enabled":true,"jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/frontlinenewsng.org\/index.php?rest_route=\/wp\/v2\/posts\/5861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/frontlinenewsng.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/frontlinenewsng.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/frontlinenewsng.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/frontlinenewsng.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5861"}],"version-history":[{"count":0,"href":"https:\/\/frontlinenewsng.org\/index.php?rest_route=\/wp\/v2\/posts\/5861\/revisions"}],"wp:attachment":[{"href":"https:\/\/frontlinenewsng.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/frontlinenewsng.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/frontlinenewsng.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Security updates included in this release<\/h2>\n
\n
Backports<\/h2>\n
\n
CVE and GHSA references<\/h2>\n
\n
CVE-2026-60137<\/code> \/ GHSA-fpp7-x2x2-2mjf<\/code><\/a><\/li>\nCVE-2026-63030<\/code> \/ GHSA-ff9f-jf42-662q<\/code><\/a><\/li>\n<\/ul>\nThank you to these WordPress contributors<\/h2>\n