CORE WEB UK • WORDPRESS SECURITY ALERT
Older maintained WordPress branches are receiving fresh security patches today. UK businesses should check their version, backup status and update path now.
WordPress has pushed fresh security builds across a number of older maintained branches today, 18 September, extending the latest fixes beyond the newest 7.1 line.
The official WordPress English (UK) release archive now lists WordPress 7.0.5, 6.9.8, 6.8.9, 6.7.8 and 6.6.8 among the builds dated 18 September. The current 7.1.1 release is also listed there today for UK users.
The backports follow WordPress 7.1.1, announced globally on 17 September as a maintenance and security release. WordPress says the release contains 17 Core bug fixes, 19 Block Editor fixes and 11 security fixes, and recommends that site owners update immediately. The project also said security fixes were being backported, where necessary, to branches eligible for security support. WordPress has published the full release notice.
For UK small businesses, the important point is not simply whether a website is on WordPress 7.1.1. Sites that have deliberately remained on an older maintained branch may now see a new security update available as the backports continue to land.
Why now matters: once a vulnerability and its fix become public, automated scanners can quickly start looking for WordPress installations that have not yet been patched. A website can still look completely normal while running code with a known weakness.
CORE WEB UK ACTION CHECKLIST
Before you click update
- Backup first: take a full files-and-database snapshot before changing WordPress core.
- Test on staging: check WooCommerce, booking systems, Elementor and other business-critical plugins before updating the live site.
- Check the dashboard: go to Dashboard > Updates and confirm which security build is available for your branch.
That makes today a sensible time to review WordPress core versions across live sites, staging sites and any older installations that are still online.
BUSY RUNNING THE BUSINESS?
Let us handle the update checks, backups and testing.
If you do not have time to check staging environments, run manual backups and verify plugin compatibility, Core Web UK’s managed website maintenance service handles security updates, backups and ongoing technical checks. Our guide on how often to update WordPress explains when an update should be treated as urgent and when it can be tested first.
This release cycle also closes the loop on the WordPress 7.1.1 RC1 testing build covered earlier this month. The key change now is that production security updates are reaching live WordPress branches, including older versions still receiving security support.
Businesses using automatic background updates may receive the relevant patch automatically. Those managing updates manually should check Dashboard > Updates and review the available core release before making changes.