According to The Hacker News, threat actors attempted to exploit a high-severity remote code execution flaw in WordPress Core within 24 hours of patches being released. The vulnerability affects WordPress Core versions ranging from 4.7 through 7.1.3 and was assigned a CVSS score of 8.1. No CVE identifier has been issued for the flaw. Patches addressing the issue were made available on October [unspecified day/date].
The observed attack attempts occurred shortly after the patches were released, indicating that actors continued targeting the vulnerability despite the availability of fixes. The nature of the attempts suggests active reconnaissance and exploitation behavior toward installations running affected versions. No details regarding specific techniques, geographic distribution of targets, or successful breaches are included in the source information.
