WordPress Core RCE flaw draws nearly 63,000 attack attempts in 24 hours
VULNERABILITYWordPress Coreredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A high-severity remote code execution vulnerability in WordPress Core affects versions 4.7 through 7.1.3 and carries a CVSS score of 8.1. It has no CVE identifier in the source report. Threat actors began exploitation attempts shortly after patches were released, with nearly 63,000 attempts observed in 24 hours. The article is truncated and does not give the exact patch release date or the fixed version number. Defenders should confirm their WordPress Core version, apply the vendor patch as soon as possible, and review logs for exploitation attempts.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether your WordPress Core version falls within 4.7 through 7.1.3.
- Apply the released WordPress Core patch as soon as possible.
- Review web server logs for signs of exploitation attempts.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Products