WordPress 7.1.4 Fixes an Upgrade Window Code Execution Bug and Updates Certificates After eMudhra Revocation
WordPress 7.1.4, released October 28 with backports to 4.7, fixes an unauthenticated upgrade-window race that Wordfence says attackers began probing within hours, along with stored XSS bugs and a root certificate update tied to the eMudhra revocation.