Reported by 5 outlets
The WordPress 7.1.1 security release fixes 11 flaws, including stored cross-site scripting and path traversal. Update your sites immediately
Why this score
- Breadth
- 2.00 / 2.0 · 5 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.54 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
The WordPress 7.1.1 security release fixes 11 flaws, including stored cross-site scripting and path traversal. Update your sites immediately covers recent security developments. Key references include CVE-2026-93485. The event content notes The WordPress 7.1.1 security release fixes 11 flaws, including stored cross-site scripting and path traversal. Update your sites immediately
via Mastodon https://securityonline.info/wordpress-7-1-1-security-release/?utm_source=mastodon&utm_medium=jetpack_social
WordPress core has a stored cros. This matters because it affects systems users rely on. Watch for patches and confirmed exploitation updates.
Timeline
-
original reporting
The WordPress 7.1.1 security release fixes 11 flaws, including stored cross-site scripting and path traversal. Update your sites immediately
securityonline.info · 26d ago · September 18th, 2026
The WordPress 7.1.1 security release fixes 11 flaws, including stored cross-site scripting and path traversal. Update your sites immediately
via Mastodon https://securityonline.info/wordpress-7-1-1-security-release/?utm_source=mastodon&utm_medium=jetpack_social
-
update from webfixer.ro
WordPress 7.1.1: security release -- why you should update immediately. September 17, 2026: 17 core fixes, 19 editor fixes, 11 security fixes.
webfixer.ro · 25d ago · September 18th, 2026
WordPress 7.1.1: security release -- why you should update immediately. September 17, 2026: 17 core fixes, 19 editor fixes, 11 security fixes. via Mastodon https://webfixer.ro/wordpress-7-1-1-lansare-de-securitate-de-ce-merita-actualizat-imediat/
-
update from suriq.io
WordPress core has a stored cross-site scripting flaw (CVE-2026-93485) a blog comment can carry. It hits every version back to 4.7 and fires
suriq.io · 25d ago · September 18th, 2026
WordPress core has a stored cross-site scripting flaw (CVE-2026-93485) a blog comment can carry. It hits every version back to 4.7 and fires
via Mastodon https://suriq.io/blog/wordpress-core-stored-xss-cve-2026-93485
-
update from gbhackers.com
WordPress 7.1.1 Fixes 11 Security Flaws Including Stored XSS and Path Traversal
gbhackers.com · 25d ago · September 18th, 2026
WordPress has released version 7.1.1, a maintenance and security update that addresses 11 vulnerabilities affecting core platform components, themes, REST API functionality, comments, XML-RPC, and plugin management. Site administrators are strongly urged to update immediately due to the potential impacts of stored cross-site scripting, authenticated path traversal, authorization bypasses, and information disclosure flaws. This release […] The post WordPress 7.1.1 Fixes 11 Security Flaws Including Stored XSS and Path Traversal appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from deafnews.it
WordPress 7.1.1 patches CVE-2026-93485: an unauthenticated comment can trigger stored XSS and remote code execution when viewed by an admin.
deafnews.it · 21d ago · September 22nd, 2026
WordPress 7.1.1 patches CVE-2026-93485: an unauthenticated comment can trigger stored XSS and remote code execution when viewed by an admin. via Mastodon https://deafnews.it/en/article/comment2shell-an-anonymous-comment-can-take-over-an-entire-site