Threat Actors Exploit Fresh WordPress Flaw

Threat actors began exploiting a high-severity WordPress vulnerability within hours of patches rolling out on October 28. The defect, patched in version 7.1.4, allows remote code execution via a race condition in the update process. Wordfence telemetry recorded more than 18,500 requests targeting installer paths during the first 21 hours, though no successful compromises were reported yet.