wpbob.com - WordPress, built like it matters

wordpress-core-7-1-3-security-patches

WordPress 7.1.3: Seven Core Security Fixes, Explained

WordPress 7.1.3 fixes seven security issues in core, including a stored XSS in the Comments screen and a second-order SQL injection in the exporter. No attacks reported yet. What each fix closes, what to look for and what to do.

A code editor window feeding HTML straight through to a browser window, with content filters switched off along the path between them

Turning the Editor into a Plain HTML Window

A plugin piece being inspected at a checkpoint into a WordPress site, beside a checklist, with other plugin pieces waiting outside

How a Plugin Earns Its Place

Latest articles

$A WordPress plugin package arriving from a trusted vendor with a hidden backdoor inside it, spreading into a website$ CVE Watch Oct 20, 2026

Rank Math PRO CVE-2026-111862: Official Update Shipped a Backdoor

A glowing blue file cabinet of folders with an amber path escaping over its top edge and down to a file outside it

CVE Watch Oct 19, 2026

WordPress Core CVE-2026-87902: Path Traversal Under Active Attack

Three server modules connected by a glowing conveyor: an open workshop, a module scanning a package, and a sealed module marked with a shield

Blog Oct 19, 2026

Why Dev, Staging and Prod? Because Production Isn't a Test Environment

An image file passing a security scanner marked safe, emerging on the other side as a glowing amber PHP code file

CVE Watch Oct 19, 2026

Bricksforge CVE-2026-85097: Unauthenticated Code Execution Under Active Attack

Server rack control panel with rows of toggle switches, most switched off and a few glowing teal

Development Oct 19, 2026

WordPress Classic Enterprise, or How I Built wpbob.com

Explore popular topics

CVE Watch

Blog

Development