WordPress released 7.0.2 on July 17, 2026. The project said the security release addressed one critical and one high-severity issue and recommended updating immediately. It also enabled forced updates through the auto-update system for sites running affected versions.

Verify your site

  1. Open Dashboard → Updates and note the installed version.
  2. Confirm that the update completed or that your host’s managed update service applied it.
  3. Check the public site and important functions after the update.
  4. If your dashboard still shows an update, contact your host or site administrator with the displayed version and error.

Automatic or forced updates reduce delay, but verification matters: a failed update, disabled maintenance system, or unusual configuration can leave a site behind. Do not infer security status from a generic WordPress version label alone; compare it with the relevant release advisory.

This article covers the July 2026 advisory. For current action, check the latest WordPress release and your site’s present version.

Source