Fasthosts incident
Critical Security Update: WordPress Core Vulnerability (CVE-2026-87902)
Resolved after 1 day 10 hours, affecting WordPress Hosting, on September 22, 2026.
A critical security vulnerability affects WordPress versions 4.7.0 through 7.1.1, which can allow remote code execution under specific conditions. Managed WordPress Customers No action needed: Fasthosts is automatically patching your site and deploying proactive security measures Self-Managed WordPress Customers Action required: Update WordPress immediately to the latest version More updates will be posted here as new information becomes available.
Affected components
Update timeline
- identified Sep 22, 2026, 09:40 PM UTC
A critical security vulnerability affects WordPress versions 4.7.0 through 7.1.1, which can allow remote code execution under specific conditions. Managed WordPress Customers No action needed: Fasthosts is automatically patching your site and deploying proactive security measures Self-Managed WordPress Customers Action required: Update WordPress immediately to the latest version More updates will be posted here as new information becomes available.
- resolved Sep 24, 2026, 08:27 AM UTC
This incident has been resolved.
Your product runs on more than Fasthosts
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services