WordPress 7.1.1 was planned as a bug-fix release and shipped as a security one on September 17. The schedule the release leads published on September 2 says the version “is intended as a bugfix only maintenance release,” and the release candidate of September 10 said the same. The final build carries 11 security fixes, alongside 17 core … Continue reading WordPress 7.1.1 Fixes a Comment-Form XSS. The Payload Passes the Sanitizer.