WordPress 7.0.2 Security Release Forces Updates Tonight
WordPress 7.0.2 shipped on 17 July 2026 to patch a broken access control flaw and an SQL injection that chain into unauthenticated remote code execution. WordPress.org has turned on forced updates, but you still need to verify every site yourself.