WordPress released version 7.1.4 on 28 October 2026 to fix several security vulnerabilities. All WordPress sites hosted on WPCloud are protected, and you don't need to do anything.
How we protect your site: 1. Firewall rules that block attempts to exploit these vulnerabilities are in place across our platform, protecting every site whether or not it has been updated yet. 2. WordPress's automatic security updates, which are on by default at WPCloud, apply the fix to most sites within a day. 3. Our team then checks every site and updates any that didn't update automatically.
Sites on older WordPress branches receive their own fixed version (for example 7.0.8, 6.9.11 or 6.8.12) and are protected even though they don't show 7.1.4.