Fasthosts incident

Critical Security Update: WordPress Core Vulnerability (CVE-2026-87902)

Minor Resolved View vendor source →

Fasthosts experienced a minor incident on September 22, 2026 affecting WordPress Hosting, lasting 1d 10h. The incident has been resolved; the full update timeline is below.

Started
Sep 22, 2026, 09:40 PM UTC
Resolved
Sep 24, 2026, 08:27 AM UTC
Duration
1d 10h
Detected by Pingoru
Sep 22, 2026, 09:40 PM UTC

Affected components

WordPress Hosting

Update timeline

  1. identified Sep 22, 2026, 09:40 PM UTC

    A critical security vulnerability affects WordPress versions 4.7.0 through 7.1.1, which can allow remote code execution under specific conditions. Managed WordPress Customers No action needed: Fasthosts is automatically patching your site and deploying proactive security measures Self-Managed WordPress Customers Action required: Update WordPress immediately to the latest version More updates will be posted here as new information becomes available.

  2. resolved Sep 24, 2026, 08:27 AM UTC

    This incident has been resolved.