#7
The Hacker News
general
October 30, 2026 at 14:08 UTC
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
By [email protected] (The Hacker News)
AI Summary
A high-severity unauthenticated race condition in WordPress Core versions 4.7 through 7.1.3 (CVSS 8.1) drew nearly 63,000 exploitation attempts within 24 hours of patch release, with no CVE identifier yet assigned. Patches were released in October and attackers are actively probing exposed instances for remote code execution. Site administrators running affected WordPress versions should prioritize emergency patching given the immediate and widespread exploitation activity.
Relevance score: 84.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →