WordPress security update 7.1.4 – important information
WordPress security update 7.1.4: what does it mean for my STRATO product?
On 28 October 2026, the WordPress project released version 7.1.4. It closes several security vulnerabilities in WordPress core. Your website is protected at STRATO. Because you manage WordPress in your STRATO Hosting package yourself, please update it to version 7.1.4. Here we show you how.
The key points in brief
- Your website is protected at STRATO: our security systems block known attack attempts against these vulnerabilities. The protection was already active before the vulnerabilities became public.
- WordPress on STRATO Hosting: please update to version 7.1.4. Only the update closes the vulnerabilities themselves.
- If you do not use WordPress, there is nothing you need to do.
What has happened?
On 28 October 2026, the WordPress project released WordPress 7.1.4. This security update fixes several vulnerabilities in WordPress core. WordPress versions 4.7 to 7.1.3 are affected, worldwide and regardless of the hosting provider.
We put protective measures in place before the vulnerabilities became public. Our security systems block known attack patterns. These measures reduce the risk, but they do not replace the update: only the updated WordPress version closes the vulnerabilities themselves.
Do I need to do anything as a STRATO customer?
If you use WordPress in your STRATO Hosting package, for example installed via Website apps, you manage WordPress yourself. Your website is protected by our security systems, but please update it to version 7.1.4.
Please note: If you do not use WordPress, you do not need to do anything. If an agency or your IT department manages your website or server, please forward this article to them.
How do I update WordPress?
Create a backup of your website before updating. You will find instructions here: How can I create a backup of my entire homepage?
Option 1: update via the WordPress dashboard
- Log in to the administration area of your WordPress website.
- In the menu, click Dashboard → Updates.
- Click Update now. Depending on your WordPress version, the button may also read Update to version 7.1.4.
Option 2: update with WP-CLI (for experienced users)
If you use WP-CLI, enter this command in your WordPress directory:
wp core update
How do I check my WordPress version?
- Log in to the administration area of your WordPress website.
- You can see the version under Dashboard → Updates or at the bottom right of every page in the administration area.
Your website includes the security fixes if it shows 7.1.4. Alternatively, the security update for your version branch is enough, for example 7.0.8, 6.9.11 or 6.8.12. You will find the full list in the WordPress 7.1.4 release notes.
Frequently asked questions
Is my website safe?
Our security systems block known attack attempts against these vulnerabilities and were already active before the vulnerabilities became public. Please still update your WordPress website, because only the update fixes the vulnerabilities themselves.
Why should I update if you are blocking attacks?
Our protection rules block known attack patterns. Only the update closes the vulnerabilities in WordPress itself.
I have automatic updates enabled in WordPress. Do I need to do anything?
Check whether your website shows version 7.1.4. If it does not, update WordPress manually.
Will the update affect my website?
Security updates within the same version line are designed to be compatible. As with any update, create a backup first.
I need help.
Contact our customer service via our Help & Contact area → Contact.
Related articles
- WordPress 7.1.4 announcement
- WordPress 7.1.4 release notes (list of fixes, affected versions, backports)
- How can I create a backup of my entire homepage?