Wordpress 7.x — End of Life
Active Actively exploitedWordpress 7.x is still supported and has no announced end-of-life date yet. The most recent release in this series is 7.1.3. 3 CVEs are tracked for this series, including 1 critical and 3 actively exploited according to CISA KEV.
Wordpress 7.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 7.1 | Aug 19, 2026 | — | No | 7.1.3 | Active | |
| 7.0 | May 20, 2026 | Aug 19, 2026 | No | 7.0.7 | Active |
CVEs affecting Wordpress 7.x (4)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-87902 | HIGH | 8.1 | 39.97% | KEV | 7.1 | An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph… | Sep 22, 2026 |
| CVE-2026-87902 | HIGH | 8.1 | 39.97% | KEV | 7.0 | An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph… | Sep 22, 2026 |
| CVE-2026-63030 | CRITICAL | 9.8 | 10.64% | KEV | 7.0 | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which… | Jul 17, 2026 |
| CVE-2026-60137 | MEDIUM | 5.9 | 5.32% | KEV | 7.0 | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in p… | Jul 17, 2026 |
Add a Wordpress 7 EOL badge to your README
Show your users which Wordpress version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/wordpress/7)Frequently asked questions
Is Wordpress 7 end of life?
No. Wordpress 7.x is still supported. It continues to receive security patches and bug fixes.
What CVEs affect Wordpress 7?
There are 3 CVEs tracked for Wordpress 7.x, including 1 critical severity issue and 3 listed in the CISA Known Exploited Vulnerabilities catalog. See the full list above with CVSS and EPSS scores.
What is the latest Wordpress 7 version?
The latest Wordpress 7.x patch release is 7.1.3, released on October 6, 2026. Always run the latest patch to benefit from all security fixes.
When was Wordpress 7 first released?
Wordpress 7.0 was released on May 20, 2026. See the full version timeline in the table above.
Is it safe to run Wordpress 7 in production?
Yes, Wordpress 7 is still supported. Make sure you run the latest patch (7.1.3) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA