Cyber SecurityTop pick
WordPress RCE Flaw Under Attack Hours After the 7.1.4 Patch: What Site Owners Need to Know
WordPress 7.1.4, released on October 28, 2026, patches a high-severity race condition in the core update process that can let unauthenticated attackers run code on a server. Wordfence saw attack attempts nine minutes after deploying its firewall rule and blocked 62,969 in 24 hours. Here's how the flaw works and what site owners should do now.
6 min read