Wordfence records 62,969 attempts against WordPress upgrade flaw

Image: Primary

Published Friday, October 30, 2026 · 1:14 PM EDT

Wordfence says it blocked 62,969 attack attempts in 24 hours against a WordPress Core flaw that can let unauthenticated attackers execute server code during a full-package upgrade. The vulnerability affects versions 4.7 through 7.1.3; patches were released on October 28. Affected upgrades unpack an installer into a predictable staging directory that can be accessible over the web. An attacker must reach that installer and complete the attack before temporary files are removed, a window lasting only seconds in normal laboratory environments. Wordfence observed sustained polling intended to catch that window. Site owners are advised to update to version 7.1.4 and check for suspicious PHP requests under wp-content/upgrade and unfamiliar administrator accounts or files.

Sources

The Hacker News

Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

AI Products

Amazon sets up supplier financing to borrow as much as $80 billion

Amazon has established supplier financing arrangements to borrow as much as $80 billion against the value of hardware it buys, Bloomberg reported.

Capital AI

Ares Intelligence raises €2.6 million for employee-based AI adoption planning

London-based Ares Intelligence has secured €2.6 million in funding backed by Creandum and Lakestar, with participation from angels connected to Google DeepMind. The company says the capital will fund expansion of its operations.

Capital

Manastu Space raises ₹22 Cr in ongoing funding round

Manastu Space raised ₹22 Cr ($2.3 Mn) from Gandhi Securities and Investments, the Thacker Legacy Trusts and angel investors, Inc42 reported from regulatory filings.

Security

Drupal warns of active exploitation of Commerce Core authorization flaw

Drupal has warned that attackers are actively exploiting an authorization flaw in Commerce Core that may financially affect merchants, The Hacker News reported.

Science

Researchers demonstrate faster water transport with more selective membrane

University of Queensland researchers demonstrated a membrane that increased water transport by approximately 44% and reduced ethanol transport by 90% in ethanol-water separation experiments, Phys.org reported.

Infrastructure Products

CXMT swings to profit as quarterly revenue rises sevenfold

Chinese memory chipmaker CXMT posted a sevenfold increase in quarterly revenue and swung from a loss to a profit, Bloomberg reported. The company expanded capacity aggressively and increased its role as a global supplier of conventional memory, or DRAM.