WordPress 7.1.3 security update: please update now

Posted 25 October 2026, Malaysia time

Attackers are actively using a security hole in WordPress itself. It is fixed in WordPress 7.1.2 (22 September 2026), and WordPress 7.1.3 (6 October 2026) fixes seven more problems.

Some popular plugins also had serious holes this month:

What you should do

1. Log in to your WordPress admin and open Dashboard > Updates.
2. Take a backup first (with your own backup plugin, or ask Synctech support to take one for you).
3. Update WordPress, then your plugins and theme, one at a time.
4. Open your home page, contact form and shop pages to check they still work.
5. Remove plugins and themes you no longer use, and old copies of your site in subfolders.

If a developer maintains your website, please send them this notice. Premium plugins such as Elementor Pro and WoodMart need a valid licence to update.

Need help?

Contact our support team at support@synctech.com.my, or open a ticket at https://apps.synctech.com.my/support/ticket.

How SyncTech can help

Regular updates like this one are part of our WordPress maintenance service.

Source and credit

We are sharing this news from the software makers below. This summary is written by Synctech in our own words, and the version numbers and dates come from their official release notes.

• WordPress 7.1.2 and 7.1.3 security releases, WordPress.org: https://wordpress.org/news/category/security/
• Elementor Pro changelog, Elementor: https://elementor.com/pro/changelog/
• WooCommerce releases, WooCommerce: https://developer.woocommerce.com/category/releases/
• WoodMart theme updates, xTemos: https://xtemos.com/

Retrieved 25 October 2026. WordPress, Elementor, WooCommerce and WoodMart are trademarks of their owners. Synctech is not connected with them. This is general information for our customers. If anything here is wrong, email support@synctech.com.my and we will correct it.