WordPress Security Alert: Hackers Target High-Severity Vulnerability

October 30, 2026 | Severity: High | CVSS: 8.1

Cybersecurity researchers have identified active attempts to exploit a high-severity vulnerability affecting WordPress Core versions 4.7 through 7.1.3.

The flaw could allow unauthenticated attackers to execute malicious code on vulnerable servers during a brief window in the WordPress update process.

According to Wordfence, nearly 63,000 attack attempts were blocked within 24 hours, highlighting how quickly cybercriminals are targeting the vulnerability.

WordPress released version 7.1.4 on October 28, 2026, to address the issue.

What Should Businesses Do?

• Update WordPress: Install version 7.1.4 or the appropriate patched release for your branch.
• Secure the update process: Restrict public access to temporary upgrade directories where possible.
• Monitor suspicious activity: Check for unusual requests, unauthorized administrator accounts, and unfamiliar plugins or PHP files.
• Review security protections: Ensure website firewalls and security monitoring are properly configured.

Although exploitation requires precise timing, the volume of attempted attacks makes prompt action important.

Britec helps businesses stay protected through proactive IT management, cybersecurity monitoring, and reliable security practices.