WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

A high-severity remote code execution vulnerability impacting WordPress Core versions 4.7 through 7.1.3 is being actively targeted in mass exploitation attempts. The flaw arises from predictable, web-accessible staging directories created under 'wp-content/upgrade' during full-package core software updates. Unauthenticated attackers exploit a narrow race condition by repeatedly probing files like 'setup-config.php' in the staging path to execute arbitrary PHP code. Web site administrators are strongly urged to update installations to WordPress version 7.1.4 to mitigate potential compromise.

Source: The Hacker News

How Mangudai Discovers This Issue

Mangudai's port module inspects external web services to identify advertised WordPress core versions between 4.7 and 7.1.3, highlighting unpatched sites vulnerable to the staging path race condition.

Continuous Autonomous AuditsMangudai scans target perimeters multiple times daily to catch configuration drift instantly.

Zero-Agent ArchitectureIdentifies exposure angles without requiring local installations or server access.

Check what your own domain exposes

A free scan lists the services, software versions, certificates and headers your domain shows to the internet, so you can see whether a flaw like this could apply to you. It reads what is visible from the outside; it does not confirm that a specific vulnerability can be exploited.

Launch Scan For My Domain