WordPress 7.1.2 patches an unauthenticated path traversal in page template resolution that can become remote code execution. Which themes and servers are exposed, how to prove a site is patched, and how to update safely, including Composer and Docker.
Chrome opened a WebMCP origin trial and shipped Lighthouse agentic audits. Safari shipped an MCP server. The line buried in Chrome's docs that matters most: agents use the accessibility tree as their primary data model.
WordPress 7.1 adds a unified public exposure flag and a shared filtering pipeline to wp_get_abilities(). The resolution order, the two callbacks, the two global filters, the REST metadata trap, and why filtering is discovery and not authorisation.
WordPress 7.1 ships jQuery UI 1.14.2 and four functions disappear. What moved, the compatibility flag core flips for you, and a 20 minute audit.
WordPress 7.1 adds four filters around the Abilities API execution pipeline, so you can short-circuit a call, enrich its input, override the permission result, or transform what comes back. What each one is, where it fires, and the patterns that matter once an AI agent is the caller.
WordPress 7.1 was going to move the block editor to React 19. It is not. Core enabled it in Gutenberg, hit interop problems with plugins and reverted, so 7.1 ships on React 18.3. What happened, what it means if you already migrated, and the change that is now the real compatibility risk.
WordPress 7.1 Beta 1 landed July 15, with the final release August 19. What is in it - AI tooling, collaboration, responsive design, media, and an enforced iframed editor - and exactly how to test your plugins and themes before release day.
WordPress 7.1 was going to move the block editor from React 18 to React 19. It does not: core hit interop problems and reverted, so 7.1 ships on React 18.3. The migration is deferred, not cancelled, and the work to prepare your blocks is unchanged.
WordPress 7.0 'Armstrong' shipped the client-side Abilities API. Here is what @wordpress/abilities and @wordpress/core-abilities let you build - registering, executing, and querying AI-ready abilities in JavaScript, with real code.
WordPress 7.0 arrives April 9, 2026 with real-time collaboration, AI integration via the Abilities API, admin redesign, and PHP 7.4 minimum requirement. Complete guide covering Phase 3 collaboration features, timeline, and how to prepare your site.