Fresh WordPress Vulnerability in Attackers' Crosshairs

Defiant says threat actors began exploiting a new high-severity WordPress vulnerability within hours of patches being released. The vulnerability affects the WordPress update process and may allow remote code execution. Wordfence telemetry showed active exploitation attempts, but no successful compromises have been reported.