From 06a616122c05a8facfc1997e714129d778a822f7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Oskar=20Sch=C3=B6ldstr=C3=B6m?= Date: Thu, 6 Aug 2026 20:15:11 -0300 Subject: [PATCH] security: update WordPress core to 7.0.3 WordPress 7.0.3 is a security release fixing vulnerabilities disclosed on 2026-08-06, including a pre-auth reflected XSS on the login screen with potential to lead to PHP code execution (CVE-2026-64638, GHSA-52p2-r8wf-jcrf, CVSS 8.9 High). Co-Authored-By: Claude Opus 5 (1M context) --- composer.lock | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/composer.lock b/composer.lock index 03c1872b..f3061177 100644 --- a/composer.lock +++ b/composer.lock @@ -7219,7 +7219,7 @@ }, { "name": "roots/wordpress", - "version": "7.0", + "version": "7.0.3", "source": { "type": "git", "url": "https://github.com/roots/wordpress.git", @@ -7250,7 +7250,7 @@ ], "support": { "issues": "https://github.com/roots/wordpress/issues", - "source": "https://github.com/roots/wordpress/tree/7.0" + "source": "https://github.com/roots/wordpress/tree/7.0.3" }, "funding": [ { @@ -7329,23 +7329,23 @@ }, { "name": "roots/wordpress-no-content", - "version": "7.0", + "version": "7.0.3", "source": { "type": "git", "url": "https://github.com/WordPress/WordPress.git", - "reference": "7.0" + "reference": "7.0.3" }, "dist": { "type": "zip", - "url": "https://downloads.w.org/release/wordpress-7.0-no-content.zip", - "reference": "7.0", - "shasum": "2ffdd31a747f68e3e5633064993997a7ce881975" + "url": "https://downloads.w.org/release/wordpress-7.0.3-no-content.zip", + "reference": "7.0.3", + "shasum": "01b2b8fb953b747de9ac8176b6d05aae1cc410b6" }, "require": { "php": ">= 7.4" }, "provide": { - "wordpress/core-implementation": "7.0" + "wordpress/core-implementation": "7.0.3" }, "suggest": { "ext-curl": "Performs remote request operations.", @@ -7396,7 +7396,7 @@ "type": "other" } ], - "time": "2026-05-20T18:34:28+00:00" + "time": "2026-08-06T21:41:49+00:00" }, { "name": "roots/wp-config",