WordPress

WordPress security updates

Security-fix and disclosure events for WordPress. Targets recurring searches like “WordPress security updates” with timeline evidence — not a marketing changelog.

2 timeline events on record.

1. Aug 6, 2026

   Build/Test Tools: Ignore PHPCS Security Advisory CVE-2026-67434

   Confirmed security fix

   Build/Test Tools: Ignore PHPCS Security Advisory CVE-2026-67434 Add an ignore for GHSA-hmqg-cxww-wqhq (CVE-2026-67434), under both its GitHub and Packagist advisory IDs. WordPress tooling does not use the vulnerabile `Gitblame`, `Hgblame` or `Svnblame` report formats, so the p…

   Open related record

2. Mar 3, 2026

   AI: Sync `Ability_Function_Resolver` API enhancement to harden security

   Security hardening

   AI: Sync `Ability_Function_Resolver` API enhancement to harden security Make `WP_AI_Client_Ability_Function_Resolver` non-static and require specifying the allowed abilities list in the constructor. This hardens security by ensuring that only explicitly specified abilities can…

   Open related record