WordPress 7.1.4, released October 28, 2026, is a WordPress core RCE update. It closes a flaw that lets someone with no login run code on a site while a full core upgrade is unpacking. Within a day, Wordfence had blocked 62,969 attempts to hit that window, so how you apply the patch matters almost as much as applying it.
WordPress 7.1.4, released October 28, 2026, is a WordPress core RCE update. It closes a flaw that lets someone with no login run code on a site while a full core upgrade is unpacking. Within a day, Wordfence had blocked 62,969 attempts to hit that window, so how you apply the patch matters almost as much as applying it.