WordPress Core Releases

$npx @buildinternet/releases get wordpress-core-releases

Sun

Mon

Tue

Wed

Thu

Fri

Sat

SepOctNovDecJanFebMarAprMayJunJulAugSep

Less

Releases10Avg3/moVersionsv7.0v7.1

All Releases

Aug 19, 2026

WordPress 7.1 “Mary Lou”

v7.1

Aug 12, 2026

RCE via malicious file upload patched

v7.0.4

Authenticated authors with upload access to sites using Imagick and Ghostscript could achieve remote code execution; this release fixes that vulnerability. WordPress recommends updating immediately.

Aug 6, 2026

Pre-auth XSS and privilege escalation fixed in security release

v7.0.3

This security release fixes 12 vulnerabilities, including a critical pre-auth reflected XSS on the login screen with potential for PHP code execution (CVE-2026-64638), a privilege escalation issue on multisite networks, and multiple stored XSS flaws. Fixes are being backported to eligible branches through 4.7.

Aug 5, 2026

Icons API, email mentions, shareable revisions land in 7.1 RC1

v7.1

WordPress 7.1 RC1 is out and includes more than 145 updates since Beta 4, with new features including an Icons API for registering icons and collections, configurable speculative-loading defaults, email notifications for @mentions in Notes, and shareable revision links.

Jul 29, 2026

Notes stay tied to passages; tagged people display cleanly

v7.1

Beta 4 includes 114 fixes and updates, including 51 in the editor and 63 in core. Notes now remain reliably tied to their referenced passage, and tagged people are displayed cleanly.

Jul 22, 2026

Apply globally now lets you pick which styles to push

v7.1

Applying local style changes globally now opens a review step to choose which modified styles to apply while keeping the rest as local overrides. Long animated GIF uploads no longer hang, EXIF-rotated images are processed correctly, and a duplicate-entry bug when uploading HEIC images in Safari is fixed.

Jul 17, 2026

Critical SQL injection and RCE vulnerabilities fixed

v7.0.2

WordPress 7.0.2 patches two security issues: a facilitated SQL injection, and a REST API batch-route confusion plus SQL injection chain leading to remote code execution. All sites should update immediately; forced auto-updates are enabled for affected versions.

Jul 15, 2026

Responsive block styling, inline notes, and client-side media processing

v7.1

Responsive and interactive state styling for blocks, inline notes with @mentions and rich text, and client-side media processing with HEIC, AVIF, and WebP support. Also includes a persistent admin toolbar for editors, infinite scrolling in the Media Library, and a new Media Editor modal.

Jul 9, 2026

31 bug fixes across block editor, admin, and media

v7.0.1

WordPress 7.0.1 fixes 31 bugs throughout Core and the Block Editor, addressing issues in the block editor, admin UI, and media handling. This is a short-cycle maintenance release; WordPress 7.1 is scheduled for 19 August 2026.

May 20, 2026

WordPress 7.0 “Armstrong”

v7.0

May 14, 2026

WordPress 7.0 RC4 ready for testing

v7.0

WordPress 7.0 RC4 is available for download and testing ahead of the May 20, 2026 final release. The release candidate includes bug fixes and changes to the Gutenberg editor since RC3, and marks the hard string freeze point for translations.

May 8, 2026

RC3 available for testing; Real Time Collaboration removed from 7.0

v7.0

WordPress 7.0 RC3 is available for download and testing on test servers via plugin, direct download, WP-CLI, or WordPress Playground, with the final release scheduled for May 20, 2026. Real Time Collaboration has been removed from the 7.0 release and will be re-evaluated during the 7.1 cycle.

Mar 26, 2026