WordPress Just Patched a Flaw in Its Own Update Process. Here’s Why Attackers Are Waiting for Your Next Update
On October 28, 2026, WordPress released version 7.1.4, a security update that fixes 22 vulnerabilities. Most of them require an attacker to already have an account on your site. One doesn’t. It’s a weakness in WordPress’s own update process, and within hours of the fix going public, attackers were already scanning sites trying to take […]