Blog

WordPress 7.0.4 Security Release: What It Fixes and What to Check After Updating WordPress 7.0.4 shipped on August 12, 2026. It is a security release, which means one thing: update now, read later. If you have already updated, good. This post is about the part almost nobody does — verifying that the update actually worked, and that nothing broke quietly in the process.   What 7.0.4 actually fixes One vulnerability, and it is a serious one: Authenticated Author+ remote code execution via malicious file upload on sites that use Imagick and Ghostscript. Broken down: Remote code execution is the worst