Wordfence
CompanySecurity timeline
- Vulnerability reported by GBHackersWordPress core RCE flaw sees over 58,000 blocked exploit attempts
- Vulnerability reported by Cyber Security NewsOver 60,000 blocked attacks target WordPress core code execution flaw
Recent news
WordPress core RCE flaw sees over 58,000 blocked exploit attempts
Attackers are targeting an unauthenticated remote code execution vulnerability in WordPress Core, with a brief exposure window during software updates. Wordfence recorded 58,693 blocked attacks within 24 hours, though these are attempts rather than confirmed compromises. WordPress 7.1.4, released on 28 October 2026, fixes 22 security vulnerabilities.
Over 60,000 blocked attacks target WordPress core code execution flaw
WordPress 7.1.4, released on 28 October 2026, fixes 22 vulnerabilities, including a race-condition remote code execution flaw in the core upgrade process. Wordfence logged 60,471 blocked exploitation attempts over 24 hours, though these are attempts rather than confirmed compromises. Administrators should update, verify that the update completed, and consider restricting public access to wp-content/upgrade/.