Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours

Threat actors are actively attempting to exploit a high-severity remote code execution (RCE) vulnerability in WordPress Core, with over 60,000 attack attempts blocked within 24 hours of patches being released. The vulnerability, affecting WordPress Core versions 4.7 through 7.1.3, is a race condition that allows unauthenticated attackers to execute code on the server during the brief window when a full-package core update is being unpacked. WordPress released version 7.1.4 on October 28, 2026, to address this and 21 other security vulnerabilities.