# Wordfence records 62,969 attempts against WordPress upgrade flaw

_Published Friday, October 30, 2026 at 1:14 PM EDT · Security · Latest · Tier 2 — Notable_

![Wordfence records 62,969 attempts against WordPress upgrade flaw — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhf-pzflJO9HQoCdvBvYNtS12gwwEjAbM4dQ30ak7UYaIPzsVPN9MlFwvIDEFkbe9cWg4wQRFPbGfJ0YXjzGcBS6mUTwttwkQ8IR7OoHyTz3owZkVzYQOAObyJUqfjsC-PqMw2pv41_m68hb6ZkwJb56kGx-Ypv7GWZBtDzjyTTQ8L8i9NxA8_MDVoJSEba/s1700-nu-rw-lo-l85-e365/wp-hack.jpg)

Wordfence says it blocked 62,969 attack attempts in 24 hours against a WordPress Core flaw that can let unauthenticated attackers execute server code during a full-package upgrade. The vulnerability affects versions 4.7 through 7.1.3; patches were released on October 28.

Affected upgrades unpack an installer into a predictable staging directory that can be accessible over the web. An attacker must reach that installer and complete the attack before temporary files are removed, a window lasting only seconds in normal laboratory environments.

Wordfence observed sustained polling intended to catch that window. Site owners are advised to update to version 7.1.4 and check for suspicious PHP requests under wp-content/upgrade and unfamiliar administrator accounts or files.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/wordpress-rce-flaw-draws-nearly-63000.html)

---
Canonical: https://techandbusiness.org/newswire/9PMIKRHIzBK42hfQjbJIOG
Published: 2026-10-30T17:14:53.285Z
Story chronology: 2026-10-30T14:08:00.000Z
Retrieved: 2026-10-30T19:39:58.062Z
Publisher: Tech & Business (techandbusiness.org)