WordPress Fix Protects Websites From Hidden Break-In

WordPress 7.1.2 fixes problem GHSA-7hp8-65ch-5whp in its page-layout picker, get_page_template(). It let strangers with no password open .php website code files stored outside the design folder, like using a side door. Found by Robert Ressl on Sept. 22, 2026, the repair also covers older versions back to 4.7.