WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

A high-severity remote code execution vulnerability has been discovered in WordPress Core affecting versions 4.7 through 7.1.3, carrying a CVSS score of 8.1. The flaw does not yet have a CVE identifier assigned. Patches were released and almost immediately threat actors began attempting to exploit the vulnerability. Within just 24 hours of patch release, nearly 63,000 attack attempts were observed targeting this flaw. The rapid exploitation attempts highlight the urgency for WordPress site administrators to apply available patches without delay. The vulnerability allows attackers to execute arbitrary code remotely on affected WordPress installations.