roots/wordpress
WordPress is open source software you can use to create a beautiful website, blog, or app.
7.0.4
19M downloads/mo
#1078 most downloaded on Packagist
roots/wordpress
What this package is like to depend on
Last release 5 months ago
22 Mar 2026
Ships unpredictably
gaps range from 8 days to 2.1 years
Rarely documented
notes for 10 of 684 stable releases
Nothing withdrawn
no release was ever pulled
8 years old
684 releases · first in 2018
41 releases in the last 12 months
see the full history below
Release timeline
485 releases · Dec 2018 to Mar 2026Releases
latest 60 of 684-
7.0.4no dateRelease notes
Open source →Sourced from WordPress.org Documentation.
Summary
Security updates
This release features several security fixes. Because this is a security release, it is recommended that you update your sites immediately.
The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:- An authenticated Author+ remote code execution issue via malicious file upload on sites that use Imagick and Ghostscript reported by the team at pwn.ai
As a courtesy, these fixes are also available in older affected branches of WordPress. As a reminder, only the most recent version of WordPress is actively supported.
- WordPress 6.9 is affected by this vulnerability. Version 6.9.7 has been released containing a fix.
- WordPress 6.8 is affected by this vulnerability. Version 6.8.8 has been released containing a fix.
- WordPress 6.7 is affected by this vulnerability. Version 6.7.7 has been released containing a fix.
- WordPress 6.6 is affected by this vulnerability. Version 6.6.7 has been released containing a fix.
- WordPress 6.5 is affected by this vulnerability. Version 6.5.10 has been released containing a fix.
- WordPress 6.4 is affected by this vulnerability. Version 6.4.10 has been released containing a fix.
- WordPress 6.3 is affected by this vulnerability. Version 6.3.10 has been released containing a fix.
- WordPress 6.2 is affected by this vulnerability. Version 6.2.11 has been released containing a fix.
- WordPress 6.1 is affected by this vulnerability. Version 6.1.12 has been released containing a fix.
- WordPress 6.0 is affected by this vulnerability. Version 6.0.14 has been released containing a fix.
- WordPress 5.9 is affected by this vulnerability. Version 5.9.16 has been released containing a fix.
- WordPress 5.8 is affected by this vulnerability. Version 5.8.15 has been released containing a fix.
- WordPress 5.7 is affected by this vulnerability. Version 5.7.17 has been released containing a fix.
- WordPress 5.6 is affected by this vulnerability. Version 5.6.19 has been released containing a fix.
- WordPress 5.5 is affected by this vulnerability. Version 5.5.20 has been released containing a fix.
- WordPress 5.4 is affected by this vulnerability. Version 5.4.21 has been released containing a fix.
- WordPress 5.3 is affected by this vulnerability. Version 5.3.23 has been released containing a fix.
- WordPress 5.2 is affected by this vulnerability. Version 5.2.26 has been released containing a fix.
- WordPress 5.1 is affected by this vulnerability. Version 5.1.24 has been released containing a fix.
- WordPress 5.0 is affected by this vulnerability. Version 5.0.27 has been released containing a fix.
- WordPress 4.9 is affected by this vulnerability. Version 4.9.31 has been released containing a fix.
- WordPress 4.8 is affected by this vulnerability. Version 4.8.30 has been released containing a fix.
- WordPress 4.7 is affected by this vulnerability. Version 4.7.35 has been released containing a fix.
- WordPress 4.6 and earlier no longer receive security updates.
-
7.0.3no dateNothing published for this version
-
7.0.2no dateNothing published for this version
-
7.0.1no dateNothing published for this version
-
6.9.7no dateRelease notes
Open source →Sourced from WordPress.org Documentation.
Summary
Security updates
This release features several security fixes. Because this is a security release, it is recommended that you update your sites immediately.
The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:- An authenticated Author+ remote code execution issue via malicious file upload on sites that use Imagick and Ghostscript reported by the team at pwn.ai
-
6.9.6no dateNothing published for this version
-
6.9.5no dateNothing published for this version
-
6.9.409 Mar 2026Nothing published for this version
-
6.9.3no dateNothing published for this version
-
6.9.2no dateNothing published for this version
-
6.9.123 May 2025Nothing published for this version
-
6.8.822 Mar 2026Release notes
Open source →Sourced from WordPress.org Documentation.
Summary
Security updates
This release features several security fixes. Because this is a security release, it is recommended that you update your sites immediately.
The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:- An authenticated Author+ remote code execution issue via malicious file upload on sites that use Imagick and Ghostscript reported by the team at pwn.ai
-
6.8.7no dateNothing published for this version
-
6.8.6no dateNothing published for this version
-
6.8.509 Mar 2026Nothing published for this version
-
6.8.323 May 2025Nothing published for this version
-
6.8.2no dateNothing published for this version
-
6.8.115 Dec 2024Nothing published for this version
-
6.7.722 Mar 2026Release notes
Open source →Sourced from WordPress.org Documentation.
Summary
Security updates
This release features several security fixes. Because this is a security release, it is recommended that you update your sites immediately.
The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:- An authenticated Author+ remote code execution issue via malicious file upload on sites that use Imagick and Ghostscript reported by the team at pwn.ai
-
6.7.6no dateNothing published for this version
-
6.7.509 Mar 2026Nothing published for this version
-
6.7.423 May 2025Nothing published for this version
-
6.7.3no dateNothing published for this version
-
6.7.215 Dec 2024Nothing published for this version
-
6.7.113 Nov 2024Nothing published for this version
-
6.6.722 Mar 2026Release notes
Open source →Sourced from WordPress.org Documentation.
Summary
Security updates
This release features several security fixes. Because this is a security release, it is recommended that you update your sites immediately.
The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:- An authenticated Author+ remote code execution issue via malicious file upload on sites that use Imagick and Ghostscript reported by the team at pwn.ai
-
6.6.6no dateNothing published for this version
-
6.6.509 Mar 2026Nothing published for this version
-
6.6.423 May 2025Nothing published for this version
-
6.6.3no dateNothing published for this version
-
6.6.216 Jul 2024Nothing published for this version
-
6.6.1no dateNothing published for this version
-
6.5.1022 Mar 2026Release notes
Open source →Sourced from WordPress.org Documentation.
Summary
Security updates
This release features several security fixes. Because this is a security release, it is recommended that you update your sites immediately.
The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:- An authenticated Author+ remote code execution issue via malicious file upload on sites that use Imagick and Ghostscript reported by the team at pwn.ai
-
6.5.9no dateNothing published for this version
-
6.5.809 Mar 2026Nothing published for this version
-
6.5.723 May 2025Nothing published for this version
-
6.5.6no dateNothing published for this version
-
6.5.501 Jun 2022Nothing published for this version
-
6.5.4no dateNothing published for this version
-
6.5.3no dateNothing published for this version
-
6.5.2no dateNothing published for this version
-
6.4.1022 Mar 2026Release notes
Open source →Sourced from WordPress.org Documentation.
Summary
Security updates
This release features several security fixes. Because this is a security release, it is recommended that you update your sites immediately.
The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:- An authenticated Author+ remote code execution issue via malicious file upload on sites that use Imagick and Ghostscript reported by the team at pwn.ai
-
6.4.9no dateNothing published for this version
-
6.4.809 Mar 2026Nothing published for this version
-
6.4.723 May 2025Nothing published for this version
-
6.4.6no dateNothing published for this version
-
6.4.501 Jun 2022Nothing published for this version
-
6.4.4no dateNothing published for this version
-
6.4.3no dateNothing published for this version
-
6.4.2no dateNothing published for this version
-
6.4.1no dateNothing published for this version
-
6.3.1022 Mar 2026Release notes
Open source →Sourced from WordPress.org Documentation.
Summary
Security updates
This release features several security fixes. Because this is a security release, it is recommended that you update your sites immediately.
The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:- An authenticated Author+ remote code execution issue via malicious file upload on sites that use Imagick and Ghostscript reported by the team at pwn.ai
-
6.3.9no dateNothing published for this version
-
6.3.809 Mar 2026Nothing published for this version
-
6.3.723 May 2025Nothing published for this version
-
6.3.6no dateNothing published for this version
-
6.3.501 Jun 2022Nothing published for this version
-
6.3.4no dateNothing published for this version
-
6.3.3no dateNothing published for this version
-
6.3.2no dateNothing published for this version