WordPress PHP minimum requirement to change to PHP 5.6 in April and PHP 7.0 in December.

A new PHP for Windows remote code execution (RCE) vulnerability has been disclosed, impacting all releases since version 5.x, potentially impacting a massive number of servers worldwide.