UpHeron
All vulnerabilities

WordPress core

GHSA-2p22-wv7j-cvfv

A hardening fix for unsafe preg_replace() replacements in the Image and Playlist blocks

Severity
Medium
Published
29 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
30 Oct 2026
Fixed in
6.6.11, 6.7.11, 6.8.12, 6.9.11, 7.0.8, 7.1.4
Sources
WordPress

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • From 7.1.0 before 7.1.4
  • From 7.0.0 before 7.0.8
  • From 6.9.0 before 6.9.11
  • From 6.8.0 before 6.8.12
All 8 release lines
  • From 6.4.0 before 6.4.14
  • From 6.5.0 before 6.5.14
  • From 6.6.0 before 6.6.11
  • From 6.7.0 before 6.7.11
  • From 6.8.0 before 6.8.12
  • From 6.9.0 before 6.9.11
  • From 7.0.0 before 7.0.8
  • From 7.1.0 before 7.1.4

References