Updates on WordPress security, Wordfence and what we're cooking in the lab today.

Wordfence Blog

WordPress 4.7.5 Security Release – Immediate Update Recommended

This entry was posted in WordPress Security on May 17, 2017 by Mark Maunder   10 Replies

A few hours ago WordPress abruptly released 4.7.5 which is a security release. It fixes six vulnerabilities which are detailed on the wordpress.org blog.

I’d like to encourage you to update to 4.7.5 as soon as possible. Unless you have disabled automatic updates, your site may have already been upgraded to WordPress 4.7.5. This security release was a ‘minor’ release and WordPress by default automatically updates core minor releases.

I have used the term ‘abrupt’ to describe this release because it went out without much pre-announcement. I’m concerned that this release may have fixed more than the vulnerabilities that have been detailed on the WordPress blog. That would not be without precedent.

On January 26th WordPress released 4.7.2 and they delayed disclosing a vulnerability for a week. That vulnerability was the infamous WordPress defacement vulnerability which resulted in hundreds of thousands of sites being defaced and multiple highly active attack campaigns.

We don’t have any data at this time on whether this release includes an additional security fix that is unannounced. But recent history indicates it is probably a good idea to update immediately.

Did you enjoy this post? Share it!

10 Comments on "WordPress 4.7.5 Security Release – Immediate Update Recommended"

Joseph May 17, 2017 at 1:06 am

Thanks guys for your efforts to update and secure our sites

Brad May 17, 2017 at 1:53 am

Many thanks for this notification; it's appreciated.

Edward May 17, 2017 at 2:14 am

Wordfence is the most useful plugin on my site. Keep up the good work

Mark Maunder May 17, 2017 at 9:54 am

Thanks Edward. Much appreciated.

James McCarthy May 17, 2017 at 2:57 am

I use your plugin on all my sites as A) it works!! and B) your team are constantly on the ball keeping up with the latest attack trends. Thanks.

Mark Maunder May 17, 2017 at 9:53 am

Woohoo!! Thanks James.

Mister Tea May 17, 2017 at 4:12 am

Wordfence is the best!

Bill May 17, 2017 at 7:47 am

Thanks for the heads up on this update!

John Voce May 17, 2017 at 9:43 am


Thank you so much for the great job you and your team are doing! A first-class public service.


SternCo May 17, 2017 at 1:06 pm

Reliable, always relevant news. Thanks!

Follow Us


Protect your websites with the #1 WordPress Security Plugin

Get Premium
Over 200 million downloads

Wordfence Newsletter

Get WordPress Security Alerts and Product Updates