Threat Intelligence Brief
Curated summary with source attribution
Source: thehackernews.com
Threat Risk: High
Victim: WordPress site administrators
Incident: Active exploitation of a race condition RCE flaw in WordPress Core.
Impact: Unauthenticated remote code execution leading to full server compromise.
Attacker: Unidentified threat actors
Analysis: The vulnerability stems from predictable staging paths used during core updates, allowing unauthenticated attackers to execute PHP code. While the exploitation window is extremely short, threat actors are using sustained polling to catch sites during the upgrade process. This highlights the critical risk of predictable directory structures during automated updates.
Recommendations: Update WordPress Core to version 7.1.4 immediately.; Monitor web server logs for suspicious requests targeting ‘wp-content/upgrade’.; Audit administrator accounts and installed plugins for any unauthorized additions.
Source: The Hacker News
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source