From 296a032e8d8a2996d289f1ec14b1697fd7cfa11a Mon Sep 17 00:00:00 2001
From: Bart Oostveen <bart@bartoostveen.nl>
Date: Wed, 12 Aug 2026 17:38:40 +0200
Subject: [PATCH] wordpress_6_9: 6.9.6 -> 6.9.7

Fixes a security vulnerability (privilege escalation).

Fixes: GHSA-8vr3-7mxf-gx8w
Fixes: CVE-2026-65640
Announcement: https://wordpress.org/news/2026/08/wordpress-7-0-4-release/
(cherry picked from commit 06d392613a73c838f1dbde8e59aa4a7a6e5a16d9)
---
 pkgs/servers/web-apps/wordpress/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/servers/web-apps/wordpress/default.nix b/pkgs/servers/web-apps/wordpress/default.nix
index ac069ac2b503..228136227a36 100644
--- a/pkgs/servers/web-apps/wordpress/default.nix
+++ b/pkgs/servers/web-apps/wordpress/default.nix
@@ -10,8 +10,8 @@ builtins.mapAttrs (_: callPackage ./generic.nix) rec {
     hash = "sha256-U4jnqPpGLDLkHOXKu3luIijNGHtrgNFdBpqNXm7NPgU=";
   };
   wordpress_6_9 = {
-    version = "6.9.6";
-    hash = "sha256-kyTKCV/z5RtKmrEcAdb8lPtutloBCjOHCSFTNwFCGH8=";
+    version = "6.9.7";
+    hash = "sha256-Ef1l7Mv03V3l7LNyS1X5LFbWweqWdJf+k3S83XpvvaY=";
   };
   wordpress_7_0 = {
     version = "7.0.3";