Help Center
Home WordPress

WordPress security update 7.1.4: important information regarding your IONOS contract

Valid for: All WordPress installations hosted with IONOS

On October 28, 2026, the WordPress project released WordPress 7.1.4 to fix several security vulnerabilities in WordPress core. The vulnerabilities affect all WordPress versions from 4.7 to 7.1.3. All websites hosted with IONOS were protected against known exploit attempts before the vulnerabilities became public. However, only a WordPress update fixes the vulnerabilities completely.

Note

The following information is primarily intended for IONOS customers who manage their own WordPress installations. If you use Hosting for WordPress with automatic updates enabled, you do not need to take any action. IONOS updates WordPress for you.

Do I need to do anything?

Update WordPress to version 7.1.4 if you manage your own WordPress installation in a web hosting package. This also applies if you have installed WordPress on one of the following server products:

  • Cloud Server
  • VPS
  • VPS+
  • Dedicated Server
  • Bare Metal Server

If you do not use WordPress, you do not need to take any action.

Updating WordPress

Note

Security releases within a version branch are designed to be compatible with your existing installation. As with any update, however, we recommend that you create a backup of your website first.

Enabling automatic updates in Hosting for WordPress

To enable automatic updates for Hosting for WordPress, complete the following steps:

  • Log in to your IONOS account.
  • In the title bar, click Menu > Web Projects. An overview of your web projects is displayed.
  • Select the WordPress project you want to edit.
  • Click the Settings tab below the domain name.

  • In the Automatic updates section, enable the Update all automatically switch.

    Optional: Click Edit settings to select individual update items.

Updating via the WordPress dashboard
  • Log in to the admin area of your WordPress website.
  • In the menu, click Dashboard > Updates.
  • Click Update Now. Depending on your WordPress version, the button may be labelled Update to version 7.1.4 instead.
Updating via WP-CLI

You can also update WordPress on the command line with WP-CLI. This method is intended for experienced users.

  • Connect to your server via SSH and change to your WordPress installation directory.

  • Enter the following command:

    wp core update

Checking your WordPress version

To check whether your website already has the security fixes, check which WordPress version is installed:

  • Log in to the admin area of your WordPress website.
  • In the menu, click Dashboard. The installed version is shown in the At a Glance box. Alternatively, check the version number in the bottom right-hand corner of any page in the admin area.

Your website has the fixes if it shows version 7.1.4. Security releases are also available for older version branches, for example, 7.0.8, 6.9.11, and 6.8.12. If your website shows one of these versions, it also has the fixes.

Caution

WordPress 4.6 and earlier versions no longer receive security updates. If your website runs one of these versions, create a backup and update it to version 7.1.4.

Frequently asked questions

Is my website secure?

Our security systems protect all websites hosted with IONOS against known attack attempts. However, you should still update any self-managed WordPress websites, because only the update fixes the vulnerabilities.

I have enabled automatic updates in WordPress. Do I need to do anything?

Check whether your website shows version 7.1.4. If it shows an older version, update WordPress manually.

Why do I need to update if IONOS blocks attacks?

Our protection rules block known attack patterns. Only the update itself closes the vulnerabilities in WordPress.

I have Hosting for WordPress and other contracts. What applies to me?

All WordPress installations managed by IONOS with the update feature enabled are updated automatically. You must update WordPress websites under your other hosting and server contracts yourself.

Will the update affect my website?

Security releases within the same version branch are designed to be compatible. As with any update, create a backup first.

I need help

If you have any questions, please contact IONOS Customer Service.

Content