March 11, 2026
The latest version of WordPress, 6.9.4, is available on Pantheon as of today, March 11th, 2026.
This is a security release that addresses incomplete security fixes from the previous 6.9.2 and 6.9.3 releases. Three security vulnerabilities are fixed in this version:
- A PclZip path traversal issue
- An authorization bypass on the Notes feature
- An XXE (XML External Entity) vulnerability in the external getID3 library
Action required
Upgrade to WordPress 6.9.4 right from your Pantheon dashboard or Terminus to access the latest features, fixes, and security enhancements. See related documentation for how to apply core updates.