Investigating - A security vulnerability, CVE-2026-65640, has been identified in WordPress that could allow an authenticated Author-level or higher user to achieve remote code execution through a malicious file upload on sites using Imagick and Ghostscript.
The vulnerability has been addressed through updates across supported WordPress branches.
Patched Versions:
Customers should update to the following patched version for their respective WordPress branch:
7.0.4
6.9.7
6.8.8
6.7.7
6.6.7
6.5.10
6.4.10
6.3.10
6.2.11
6.1.12
6.0.14
5.9.16
5.8.15
5.7.17
5.6.19
5.5.20
5.4.21
5.3.23
5.2.26
5.1.24
5.0.27
4.9.31
4.8.30
4.7.35
Recommended Action:
Customers are strongly encouraged to update WordPress core to the latest available patched version and ensure automatic updates are enabled where appropriate.
Customers with automatic updates enabled should receive the applicable update automatically. However, we recommend verifying the currently running WordPress version to ensure the security update has been successfully applied.
We will continue to monitor the situation and provide further updates if required.
If you need assistance or have any concerns, please reach us via live chat or via a case.
Additional information:
https://wordpress.org/news/2026/08/wordpress-7-0-4-release/
https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-8vr3-7mxf-gx8w
Aug 12, 2026 - 11:44 EDT
The vulnerability has been addressed through updates across supported WordPress branches.
Patched Versions:
Customers should update to the following patched version for their respective WordPress branch:
7.0.4
6.9.7
6.8.8
6.7.7
6.6.7
6.5.10
6.4.10
6.3.10
6.2.11
6.1.12
6.0.14
5.9.16
5.8.15
5.7.17
5.6.19
5.5.20
5.4.21
5.3.23
5.2.26
5.1.24
5.0.27
4.9.31
4.8.30
4.7.35
Recommended Action:
Customers are strongly encouraged to update WordPress core to the latest available patched version and ensure automatic updates are enabled where appropriate.
Customers with automatic updates enabled should receive the applicable update automatically. However, we recommend verifying the currently running WordPress version to ensure the security update has been successfully applied.
We will continue to monitor the situation and provide further updates if required.
If you need assistance or have any concerns, please reach us via live chat or via a case.
Additional information:
https://wordpress.org/news/2026/08/wordpress-7-0-4-release/
https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-8vr3-7mxf-gx8w
Aug 12, 2026 - 11:44 EDT
Investigating - A high-severity reflected XSS vulnerability, CVE-2026-64638, has been identified in the WordPress login interface. Exploitation requires a victim to visit a specially crafted URL and, under specific conditions, could potentially lead to PHP code execution.
Impacted versions
Impacted versions:
WordPress 4.7 – 7.0.2 (every release on every branch)
WordPress 4.6 and earlier — end of life, no patch available
Fixed versions:
WordPress 7.0.3
WordPress 6.9.6
WordPress 6.8.7
Equivalent minor releases on every remaining supported branch back to 4.7
Recommended Action
Customers are strongly encouraged to update WordPress core and ensure automatic security updates are enabled where appropriate. Since exploitation requires user interaction, customers should also remain vigilant against phishing attempts and avoid clicking suspicious or unsolicited links.
Customers with automatic security updates enabled should receive the applicable update automatically; however, we recommend verifying the currently running WordPress version.
There is currently no reported evidence of widespread exploitation in the wild. We will continue to monitor the situation and provide further updates if required.
If you need assistance or have any concerns, please contact our Support team.
Aug 08, 2026 - 09:24 EDT
Impacted versions
Impacted versions:
WordPress 4.7 – 7.0.2 (every release on every branch)
WordPress 4.6 and earlier — end of life, no patch available
Fixed versions:
WordPress 7.0.3
WordPress 6.9.6
WordPress 6.8.7
Equivalent minor releases on every remaining supported branch back to 4.7
Recommended Action
Customers are strongly encouraged to update WordPress core and ensure automatic security updates are enabled where appropriate. Since exploitation requires user interaction, customers should also remain vigilant against phishing attempts and avoid clicking suspicious or unsolicited links.
Customers with automatic security updates enabled should receive the applicable update automatically; however, we recommend verifying the currently running WordPress version.
There is currently no reported evidence of widespread exploitation in the wild. We will continue to monitor the situation and provide further updates if required.
If you need assistance or have any concerns, please contact our Support team.
Aug 08, 2026 - 09:24 EDT
API
Operational
DNS
Operational
Cloud Dedicated
Operational
Cloud VPS Hosting
Operational
CPanel
Operational
InterWorx
Operational
Plesk
Operational
Object Storage
Operational
VMware Cloud
Operational
VMware Private Cloud
Operational
Business Email
Operational
Load Balancers
Operational
Cloud Load Balancers
Operational
Shared Load Balancers - DC2
Operational
Shared Load Balancers - DC3
Operational
Shared Load Balancers - DC4
Operational
Shared Load Balancers - DC5
Operational
Network
Operational
LAN Network
Operational
PHX Network
Operational
AMS Network
Operational
Data Centers
Operational
DC2 - LAN
Operational
DC3 - LAN
Operational
DC4 - PHX
Operational
EU - AMS
Operational
Management Portal
Operational
Support Services
Operational
Chat
Operational
Case
Operational
Phone
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Scheduled Maintenance
Scheduled Maintenance: Acronis Agent Updates Sep 2, 2026 11:00-17:00 EDT
We will be performing routine updates to Acronis agents to prepare for upcoming system upgrades. This maintenance is part of our standard update schedule.
These updates will be applied automatically, and no action is required from you. We do not anticipate any service disruption or downtime during this process. There is a small chance that this update could temporarily interrupt backups. Our team will actively monitor the deployment to ensure continued stability.
If you have any questions or require assistance, please reach out to our support team and we will be happy to assist
[REF CC-13737]
Posted on Aug 28, 2026 - 14:09 EDT
These updates will be applied automatically, and no action is required from you. We do not anticipate any service disruption or downtime during this process. There is a small chance that this update could temporarily interrupt backups. Our team will actively monitor the deployment to ensure continued stability.
If you have any questions or require assistance, please reach out to our support team and we will be happy to assist
[REF CC-13737]
Posted on Aug 28, 2026 - 14:09 EDT