WordPress patches code-injection flaw as exploitation attempts emerge
BROBROK News · Based on reporting by DiarioBitcoin ·
WordPress released version 7.1.4 on October 28, fixing 22 vulnerabilities and backporting patches to older branches. Wordfence also reported active attempts to exploit a flaw that could allow code execution during certain update processes.
Key points
- WordPress 7.1.4 addresses 22 vulnerabilities.
- Security fixes were backported to multiple older CMS branches.
- Wordfence saw more than 18,500 requests in 21 hours targeting the issue.
- The flaw involves a predictable temporary path during core updates.
- Administrators are advised to update and check for suspicious files and accounts.
Why it matters
The issue affects sites only during a vulnerable update window, but that is enough for attackers to try automated probes. For operators, patching and log review are the immediate priorities.
Original headline: “WordPress corrige una falla de inyección de código y detectan intentos de explotación”
Read the original on DiarioBitcoin
Summary and analysis written by BROBROK News from the original report. Read the full story on the source website. Not investment advice.