Skip to content
PatchBriefing

Search PatchBriefing

Type at least two characters. Results update as you type.

Search CVEs, products, packages and article titles.

Nothing found. Identifiers such as CVE and GHSA can be searched in both languages.

View all search results
Subscribe
6.8.11
RELEASE PATCH WordPress · released October 6, 2026 · covered October 6, 2026

WordPress 6.8.11 Released

WordPress 6.8.11 is now available as part of the 6.8 maintenance line, with PHP 7.2.24 recommended as the minimum PHP version.

6.8.x maintenance release Recommended PHP 7.2.24
AI summary

WordPress 6.8.11 has been published as the latest point release in the 6.8 series. As with other maintenance releases in this line, it is aimed at keeping sites on 6.8 current and stable, and WordPress.org lists PHP 7.2.24 as the recommended PHP version to run alongside it. Site owners and developers maintaining WordPress installations should plan to apply this update in the normal course of site maintenance.

What's in this release

The official release notes for 6.8.11 are limited to confirming availability of the version and the recommended PHP baseline (7.2.24). No specific bug fixes, features, or security advisories are listed in the source notes for this release. As is typical for releases in a WordPress minor maintenance line, updates of this kind generally consist of small fixes and refinements rather than new functionality.

How to update

Most WordPress sites with automatic background updates enabled for minor releases will receive 6.8.11 without any action required. Sites that manage updates manually can apply it from the Dashboard under Updates, or by updating core files directly for managed or custom hosting setups. Before updating, it remains good practice to confirm your hosting environment meets the recommended PHP version and to have a current backup available, consistent with standard WordPress upgrade practice.

Compatibility notes

Since this release sits within the existing 6.8 line, it is expected to be compatible with plugins and themes already working on that version, with no breaking changes indicated in the release notes. Site owners running older PHP versions should note the recommended PHP 7.2.24 baseline and consider upgrading their PHP version where feasible, as PHP itself receives security and performance updates independently of WordPress core.

Synthesized by AI from 1 source · updated 6 hours ago
Sources · merged by AI 1 total
notes ↗
MED 5.7 WordPress 9 Oct WP Rocket: CVE-2026-97076 and CVE-2026-97075 Two vulnerabilities in the WP Rocket WordPress plugin allow (1) code-injection via an executable regular-expression error (CVE-2026-97076) and (2) missing authorization that permits incorrect access (CVE-2026-97075). Both are reported fixed at 3.23.5 in source data, but fix availability is inconsistent in the advisory metadata. [Sources: 4791, 32082, 4790, 32092] Read full report → MED 4.0 WordPress 9 Oct CVE-2026-101324 — Fluent Forms reflected XSS via {get.*} in Custom HTML fields Fluent Forms contains a reflected cross-site scripting (XSS) issue where unauthenticated input via {get.*} SmartCodes in Custom HTML fields can inject script; the issue is addressed in 6.2.15. [CVE-2026-101324] Read full report → HIGH 7.0 WordPress 7 Oct Critical PHP Object Injection Vulnerability in The Events Calendar WordPress Plugin (CVE-2026-95606) A critical deserialization flaw (CVE-2026-95606, CVSS 9.8) in The Events Calendar WordPress plugin allows unauthenticated attackers to perform PHP object injection. No fixed version has been confirmed at the time of writing. Read full report →
The Morning Brief

Relevant changes for the stacks you follow.

Choose your stacks, topics and optional WordPress plugins. At 07:00 CEST, matching advisories and releases from the reporting period are grouped into one email.

Subscribe →

✓ Choose stacks and topics✓ Change preferences anytime✓ One grouped email