Critical · 1 source · latest 2d

WordPress core RCE flaw sees over 58,000 blocked exploit attempts

CRITICAL · VULNERABILITYWordPressredteam/daily · 1 source

Severity: Critical
Sources: 1

What happened

Attackers are targeting an unauthenticated remote code execution vulnerability in WordPress Core, with a brief exposure window during software updates. Wordfence recorded 58,693 blocked attacks within 24 hours, though these are attempts rather than confirmed compromises. WordPress 7.1.4, released on 28 October 2026, fixes 22 security vulnerabilities.

For IT people · Written by AI from 1 source · Wrong?

What to do

Update WordPress core to version 7.1.4 or later as soon as possible.
Review web server and firewall logs for exploitation attempts against WordPress sites.
Check WordPress installations for unexpected files, users or admin accounts.

Written by AI from the sources, checked against them

Read the full story at the source

Full story timeline · 1 update

Sat 31 October07:03WordPress RCE Vulnerability Under Active Attack With Over 58,000 Exploit Attempts BlockedGBHackers

Who reported · 1 outlet

GBHackers

Who and what is in it

Products

WordPress