WordPress 7.0.2 Patches Critical SQL Injection and RCE Flaws, Update Now
WordPress 7.0.2 is a forced security release fixing one critical and one high severity vulnerability, including a REST API bug that could lead to remote code execution. Backports are available for 6.8 and 6.9.