Home / Nov 01, 2026 / Story
0
#7 The Hacker News general October 30, 2026 at 14:08 UTC

WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

By [email protected] (The Hacker News)

AI Summary

A high-severity unauthenticated race condition in WordPress Core versions 4.7 through 7.1.3 (CVSS 8.1) drew nearly 63,000 exploitation attempts within 24 hours of patch release, with no CVE identifier yet assigned. Patches were released in October and attackers are actively probing exposed instances for remote code execution. Site administrators running affected WordPress versions should prioritize emergency patching given the immediate and widespread exploitation activity.

Relevance score: 84.0/100

# More from November 01