WordPress Core RCE Flaw Draws Nearly 63,000 Attack Attempts
A high-severity RCE flaw in WordPress Core sparked nearly 63,000 attack attempts in just 24 hours following the release of security patches.
Threat actors quickly mobilized to exploit a high-severity security flaw in WordPress Core shortly after the official patches were released in October.
- Nearly 63,000 attack attempts recorded within just 24 hours
- The vulnerability affects WordPress Core versions 4.7 through 7.1.3
- It involves remote code execution (RCE) with a CVSS score of 8.1
Details of the WordPress Core Vulnerability
The security flaw relates to a case of remote code execution impacting WordPress Core. Although it currently lacks a CVE identifier, the issue carries a serious CVSS score of 8.1, highlighting the potential danger for millions of deployed instances.
The affected versions span widely from 4.7 to 7.1.3. Immediately after patches became available, threat actors began scanning and attempting exploits, showcasing how fast automated tools target newly disclosed bugs.
Read alsoIvanti Connect Secure Flaws Exploited for Root AccessWhat This Means for Web Administrators
This rapid wave of attacks serves as an urgent reminder for website administrators and developers to apply security updates promptly. Failing to patch software immediately leaves web properties exposed to complete takeover by malicious actors.
Source: The Hacker News
