The WordPress was released the WordPress version 6.9.4 on March 11, 2026. WordPress said it was a security release that includes additional fixes that were not applied to their earlier WordPress version of 6.9.2 security release and 6.9.3 bug fix release. Also WordPress indicated that this new version should be updated on every WordPress websites immediately.
How to update WordPress Version 6.9.4?
To get this WordPress version 6.9.4, you can update it automatically from your WordPress website Dashboard > Updates menu in your admin area or if you trying to installing a WordPress website manually on your server, you can download it here.
If you are new to WordPress or if you are looking for the step by step instructions on installing and updating your WordPress, we recommend that you should work with an industry expert such as Savinu LABS or with a WordPress developer.
What are the Security updates that included in WordPress Version 6.9.4?
- A PclZip path traversal issue reported independently by Francesco Carlucci and kaminuma.
- An authorization bypass on the Notes feature reported by kaminuma.
- An XXE in the external getID3 library reported by Youssef Achtatal.
What are the list of files revised?
/wp-admin/includes/file.php
/wp-includes/ID3/getid3.lib.php
/wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php
