Over 60,000 blocked attacks target WordPress core code execution flaw
VULNERABILITYWordPressredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Attackers are trying to exploit a flaw in WordPress that can be used to take control of a website while it is being updated. The attacks depend on a very short timing window, and WordPress has released a fix in version 7.1.4 that site owners should install straight away.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Update WordPress to version 7.1.4, or to the patched branch for your version such as 7.0.8 or 6.9.11.
- Check under Dashboard and Updates that the update has actually completed rather than assuming automatic updates worked.
- Restrict public web access to wp-content/upgrade/ as an additional safeguard.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Products