Abstract
The WordPress Safety Staff has launched WordPress 7.0.2 to handle a vital safety vulnerability affecting WordPress core…
This vulnerability impacts all variations of WordPress, 6.8 and newer. As a result of it is a vital vulnerability, we strongly suggest that each one clients working WordPress, throughout VPS, Internet Internet hosting, and Managed Internet hosting for WordPress, replace instantly.
For full technical particulars, together with the CVE identifier and official severity score, see the official WordPress 7.0.2 launch announcement.
Who’s affected?
This difficulty impacts ALL self-hosted WordPress installations of WordPress 6.8 and higher, together with however not restricted to:
- VPS clients (Self-Managed and Managed) working WordPress.
- Internet Internet hosting & Home windows Internet hosting clients working WordPress.
- Managed Internet hosting for WordPress clients.
- Pagely (A GoDaddy Model)
What GoDaddy is doing
For Managed Internet hosting for WordPress and Pagely clients, GoDaddy will mechanically push out the replace to the patched model.
For Internet Internet hosting clients, GoDaddy is deploying extra protecting measures on the platform and infrastructure stage to assist scale back threat when you replace. These measures are a brief safeguard, not an alternative to patching. You’re liable for updating WordPress core to the most recent model as quickly as doable.
For VPS clients (Self-Managed and Managed), clients handle their very own WordPress set up and are liable for making use of the replace themselves, except automated updates are enabled, by which case the replace shall be utilized mechanically. Directions are under.
What it’s worthwhile to do (VPS clients, Self-Managed and Managed)
- When you’ve got automated WordPress updates enabled, the patched model shall be utilized mechanically.
- In the event you handle your individual WordPress updates, replace WordPress core to model 7.0.2 by way of your WordPress admin dashboard (Dashboard > Updates) or WP-CLI:
wp core replace - Again up your website earlier than making use of updates, if you have not already arrange automated backups.
- Confirm the replace by checking your WordPress model underneath Dashboard > At a Look.
What it’s worthwhile to do (Internet Internet hosting & Home windows Internet hosting clients)
- GoDaddy has utilized protecting measures on the platform stage to assist scale back publicity whereas the official patch is rolled out.
- We nonetheless suggest confirming your WordPress core model is updated (7.0.2).
What it’s worthwhile to do (Managed Internet hosting for WordPress clients)
- GoDaddy will mechanically push out the replace to your website.
