WordPress 7.1.4: RCE attack exploits vulnerability in the update phase

A new high-impact vulnerability in WordPress 7.1.4 allows remote code execution during the update process. Threat actors have started exploiting it immediately, with over 18,500 attempts recorded in 21 hours. The flaw, not yet assigned a CVE, exploits predictable staging paths during updates. Read on GoYou.it