WordPress 7.1.4 Fixes 22 Vulnerabilities: What to Update Now
WordPress 7.1.4, released October 28, 2026, fixes 22 vulnerabilities including an update race condition and many stored XSS bugs. What to check and update now.
332 practical guides to website speed, SEO, email deliverability, DNS, security and automation, with fixes you can copy and paste.
WordPress 7.1.4, released October 28, 2026, fixes 22 vulnerabilities including an update race condition and many stored XSS bugs. What to check and update now.
We checked the 10,000 most popular websites for AI crawler blocks, llms.txt, HTTPS, security headers, SPF and DMARC. 22.4% of sites with a robots.txt block at least one AI bot.
Drupal fixed a critical Field UI remote code execution flaw on October 14, 2026, rated 19/25. Which versions are safe, the stopgap and a patch checklist.
Eight eMudhra intermediate CA keys were found to be weak in October 2026 and browsers pulled trust. How to check whether your SSL certificate is affected.
WordPress 7.1.3, released on 6 October 2026, fixes seven security issues including stored XSS and SQL injection. What site owners should check and update.
PHP fixed two critical remote code execution flaws on 21 October 2026. Which versions are safe, what the NCSC advises and a patch checklist for UK websites.
MD5 vs SHA-256 explained: why MD5 collisions make it unsafe, when it's still fine for checksums, and why neither should store passwords. Use bcrypt or Argon2id.
Cyber Essentials v3.3 took effect in April 2026 with automatic fails for missing MFA and slow patching. What UK businesses with websites need to check now.
Chrome 154 now asks users before loading any public HTTP page. What the warning means for your website, plus a technical SEO checklist to fix it fast.
The biggest website security threats for UK small businesses in 2026, backed by government breach data, plus a practical checklist to cut your risk this month.
The best Cloudflare free plan settings for a small business: SSL mode, HTTPS, HSTS, TLS, caching, cache rules, bot and AI controls, WAF and DNS, step by step.
A web application firewall (WAF) blocks malicious requests such as SQL injection and bad bots before they reach your site. See if you need one and free options.
Popular topics
Free website audit
Speed, SEO, DNS, email (SPF/DKIM/DMARC) and security in one scan, with a prioritised fix list.
Make It Flow assistant
Tools, guides and AI automation
Hi! I can find the right free tool, explain an audit result, or tell you how Make It Flow can automate any part of your business. What do you need?
Book a free 15-minute call
Pick a time that suits you. Times are shown in your time zone ().
A Make It Flow agent will confirm the call by email within 24 hours.
AI answers can be wrong. Chats are stored so the team can follow up. Privacy