Skip to content
CHRONOSAlerts
AI & TechnologyUrgency level L3ElevatedActiveGlobal
CHRONOS AI & Technology category illustration. Illustrative only, not specific to this event.
CHRONOS VisualizationAI & Technology illustration, not specific to this event

WordPress 7.1.4 released Oct 28, 2026, updates bundled root certificates after eMudhra revocation

Event summary

On October 28, 2026 the WordPress project published version 7.1.4, a security release that includes an update to the bundled root certificates because of the eMudhra revocation. The official release notes state the bundled root certificates were updated and independent reporting recommends updating sites immediately. Operators who rely on WordPress core's bundled CA collection should apply 7.1.4 to receive the updated CA bundle and the security fixes included in the release.

CHRONOS Wire · October 29 · Alert 11

1:17
Publication details
Published
Updated
Revision
r1
Source
WordPress.org
Urgency
3/5
Elevated
60/100
NOTABLE
80/100
HIGH
30/100
LOW
20/100
LOW
90/100
VERY HIGH

Cliff Notes

  • WordPress 7.1.4 shipped Oct 28, 2026 and refreshes the bundled CA bundle to account for the eMudhra revocation; consider updating promptly.

U.S. Impact

U.S. Impact assessment pending.

ELI5: Plain-English Explanation

On October 28, 2026 WordPress released version 7.1.4. The release updates the copy of root certificates bundled with WordPress because of the eMudhra revocation and is described as a security release; a secondary reporter recommends updating sites immediately.

Why Urgent Level 3

The eMudhra intermediate key incident reduces trust in the affected chain; vendor updates that refresh CA bundles and ship security fixes reduce exposure for affected deployments quickly.

What Changed

WordPress published 7.1.4 on October 28, 2026. The official release notes state it includes an update to the bundled root certificates due to the eMudhra revocation. Secondary reporting describes the release as a security update and explicitly recommends updating sites immediately.

What Is Genuinely New

WordPress published a short-cycle security release, version 7.1.4, on October 28, 2026 that updates the bundled root certificates because of the eMudhra revocation.

CHRONOS Bottom Line

If you rely on WordPress core's bundled CA certificate collection, apply WordPress 7.1.4 to receive the refreshed CA bundle; secondary reporting also recommends prompt updates for the included security fixes.

Uncertainties / Known Unknowns

The precise fraction of WordPress sites that rely on the bundled CA bundle rather than the host OS or platform CA store is unknown from the available reporting.

Detailed Analysis

WordPress 7.1.4 is a security release published October 28, 2026. The official WordPress release notes explicitly mention an update to the bundled root certificates due to the eMudhra revocation. Independent reporting summarizes the release as a security update and recommends operators update immediately. Available sources do not provide a detailed breakdown of which hosting environments will receive the bundled CA update automatically versus via other CA stores.

Sources / Evidence

  1. 01
    WordPress 7.1.4
    WordPress.org2026-10-28
  2. 02
    WordPress 7.1.4 security release: upgrade-window RCE and a batch of stored XSS fixes
    pwn.watch2026-10-28

Follow CHRONOS ALERTS

Published alerts also appear on Instagram and Threads as @chronosalerts.

Instagram@chronosalertsThreads@chronosalerts