WordPress announced a security release to address seven security vulnerabilities plus four bug fixes. This security release, Version 7.1.3, addresses a stored XSS, denial-of-service DoS and five other vulnerabilities of undisclosed severity level. WordPress recommends updating sites immediately<\/p>\n
WordPress names seven vulnerabilities:<\/p>\n
The official announcement does not list severity ratings, CVSS scores,describe the vulnerabilities, or offer information of whether these vulnerabilities are being exploited in the the wild. However, WordPress recommends updating immediately<\/p>\n
The security fixes are also being backported to older WordPress branches eligible for security fixes, currently extending through WordPress 4.7, although those backports are still in progress. Backports will ship for older branches as they become ready<\/p>\n
The four bug fixes include three relatively benign issues that cause a poor user experience plus one that is critical<\/p>\n
Two of the bug fixes address oEmbed endpoints that return a 404 message. One is related to a music promotion platform and the other an eCard humor site.\u00a0One of the fixes addresses a bug that may cause a website icon image in the admin to toolbar expand to gigantic proportions. The fourth can lead to a fatal error that sounds bad but probably isn\u2019t that bad<\/p>\n
The fourth is a critical WordPress bug can make image uploads fail with a fatal error on hosts lacking an optional DOM library, leaving site owners unable to upload media. The WordPress ticket for this issue says that the image upload process stopped completely, so the image could not be uploaded. That sounds less bad than a complete page or site failure<\/p>\n
The missing component is PHP\u2019s DOM extension (ext-dom), which provides the DOMDocument and DOMXPath classes WordPress was trying to use. The reason this problem may have arisen is that WordPress strongly recommends the extension but does not require it<\/p>\n
WordPress 7.0 introduced code that used DOMDocument without first checking whether the extension existed. On hosts without it, image uploads could trigger a fatal error and fail completely<\/p>\n
The WordPress ticket for this issue rates the bug as critical, but a core committer also indicated it was probably rare: the code had been released for 134 days before the first report, which implies that nearly all hosts already provide the DOM extension and that the critical flaw is not widespread<\/p>\n
Official announcement here<\/p>\n
Featured Image by Shutterstock\/Yes058 Montree Nanta<\/p>\n
CategoryNewsWordPress<\/p>\n
\n En rapport:<\/strong> \n <a href="https:\/\/yoursite.com\/automation-africa\/" title="WhatsApp<\/a> Marketing Automation Africa : 6 erreurs dangereuses commises par les marques au Nig\u00e9ria\u201d> Rejoindre Justfine Infotech<\/strong> et d\u00e9velopper de v\u00e9ritables comp\u00e9tences num\u00e9riques en IA, automatisation, d\u00e9veloppement web, marketing digital, bureautique, e-commerce, travail ind\u00e9pendant et cybers\u00e9curit\u00e9<\/a>.<\/p>\n Available Program<\/a>mes:<\/strong> WhatsApp :<\/strong>
\n
\n Formation en automatisation num\u00e9rique au B\u00e9nin\u00a0: 5 comp\u00e9tences cl\u00e9s recherch\u00e9es par les employeurs en 2026
\n <\/a>\n <\/p>\n
\n Automatisation du marketing WhatsApp en Afrique\u00a0: 6 erreurs dangereuses commises par les marques au Nig\u00e9ria
\n <\/a>\n <\/p>\n<\/div>\nVous souhaitez apprendre cela de mani\u00e8re pratique ?<\/h3>\n
\n Certificat de 6 semaines \u2022 Certificat professionnel de 3 mois \u2022 Dipl\u00f4me de 6 mois \u2022 Dipl\u00f4me professionnel complet<\/p>\n
\n +229 01 57 57 99 15
\n +229 01 66 68 11 60<\/p>\n