WordPress flaw draws nearly 63,000 attack attempts in 24 hours

Attacks blocked in 24 hours

62,969 according to Wordfence

Security firm Wordfence said it blocked 62,969 attacks aimed at the flaw over 24 hours. Two of the largest sources repeatedly probed small groups of sites for about 14.5 hours.

The flaw affects WordPress versions 4.7 through 7.1.3 and lets an unauthenticated attacker run code on a server during a core update. Success depends on catching a window that lasts only seconds.

What to do

Patches came out on Oct 28 with WordPress 7.1.4. Site owners should update and look for unexpected PHP files under wp-content/upgrade and for unfamiliar administrator accounts.

Tech · 4 d ago

WordPress flaw draws nearly 63,000 attack attempts in 24 hours

Security firm Wordfence said it blocked 62,969 attacks aimed at the flaw over 24 hours. Two of the largest sources repeatedly probed small groups of sites for about 14.5 hours.

The flaw affects WordPress versions 4.7 through 7.1.3 and lets an unauthenticated attacker run code on a server during a core update. Success depends on catching a window that lasts only seconds.

Patches came out on Oct 28 with WordPress 7.1.4. Site owners should update and look for unexpected PHP files under wp-content/upgrade and for unfamiliar administrator accounts.

WordPress flaw draws nearly 63,000 attack attempts in 24 hours

Also read