High-Severity WordPress RCE Vulnerability Exploited in 63,000 Attack Attempts

A high-severity remote code execution (RCE) vulnerability in WordPress Core, affecting versions 4.7 through 7.1.3 with a CVSS score of 8.1, has triggered nearly 63,000 attack attempts within 24 hours. The flaw, which lacks a CVE identifier, was patched on October 15, 2026, but exploitation began immediately after the release.

Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released.

The vulnerability, which does not have a CVE identifier, relates to a case of remote code execution impacting WordPress Core versions 4.7 through 7.1.3. It carries a CVSS score of 8.1 on the CVSS scoring system. Patches for the flaw were released on October

Read original article