WordPress 7.1.4, released October 28, 2026, fixes a WordPress update race condition that lets an unauthenticated attacker run code on a site while a core upgrade is in progress, along with 21 other security fixes. Scanners began probing for that brief window nine minutes after Wordfence shipped a blocking rule, so check that your site actually installed the patched build.
WordPress 7.1.4, released October 28, 2026, fixes a WordPress update race condition that lets an unauthenticated attacker run code on a site while a core upgrade is in progress, along with 21 other security fixes. Scanners began probing for that brief window nine minutes after Wordfence shipped a blocking rule, so check that your site actually installed the patched build.