WordPress published version 7.1.4 on October 28 and recommends updating immediately. Fixes include a weakness that could allow remote code execution during an upgrade and several stored cross-site scripting issues, where malicious content saved in a site can execute in someone’s browser. Other fixes address access to unpublished Customizer changes and certain editorial notes. Sites supporting automatic background updates can begin updating automatically. Source: https://wordpress.org/news/2026/10/wordpress-7-1-4/
AudioSlave analysis: A useful maintenance record connects the notice to the affected installation, completed update and functional check afterward. An available update does not establish that protection has been applied. Businesses using WordPress should have their maintainer verify completion and check essential forms, booking and checkout. No affected AudioSlave installation has been established.