Skip to content
WordPress 7.0.3 Security Release Addresses Multiple Vulnerabilities

WordPress 7.0.3 Security Release Addresses Multiple Vulnerabilities

First seen 4 Nov 2026, 02:48 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 4, 2026 at 02:49 UTC
  • •WordPress 7.0.3 includes critical security fixes for multiple vulnerabilities.
  • •Users are strongly advised to update their sites immediately to prevent exploitation.
  • •The release addresses CVE-2026-64638, a high-severity vulnerability with a CVSS score of 8.9.

WordPress has released version 7.0.3, which includes several security fixes. Users are urged to update immediately to mitigate risks associated with stored cross-site scripting (XSS) vulnerabilities and privilege escalation issues. Notable vulnerabilities include pre-auth reflected XSS on the login screen and stored XSS in various blocks, reported by multiple contributors. The release addresses CVE-2026-64638, which has a CVSS score of 8.9, indicating a high severity level. The security team has acknowledged the contributions of various researchers for responsibly reporting these vulnerabilities. Users can update via the Dashboard or by downloading the update directly from WordPress.org. The update is crucial for maintaining site security against potential exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-08-07
CVE-2026-64638 published
A high-severity vulnerability with a CVSS score of 8.9 was disclosed, affecting WordPress installations.
Article 1
2026-11-04
WordPress 7.0.3 released
WordPress released version 7.0.3, which includes multiple security fixes addressing critical vulnerabilities.
Article 2

More articles in this cluster (2)

Following this threat?

Track CVE-2026-64638 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3

Common questions

What vulnerabilities does WordPress 7.0.3 address?
It addresses several vulnerabilities including stored cross-site scripting (XSS) and privilege escalation issues.
How can I update to WordPress 7.0.3?
You can update via the Dashboard under Updates or download it directly from WordPress.org.
Is there any active exploitation of these vulnerabilities?
No active exploitation has been reported; however, immediate updates are recommended to prevent potential risks.