Federal cybersecurity officials are sounding the alarm after discovering that hackers are actively targeting a high severity flaw within the heart of WordPress. The Cybersecurity and Infrastructure Security Agency recently added the vulnerability to its known exploited vulnerabilities catalog, confirming that malicious actors are leveraging a specific timing glitch during software updates to sneak unauthorized code onto web servers.
The technical issue stems from what experts call a race condition, where a brief window opens during the installation of core package upgrades. Because certain staging paths used during these updates are predictable and accessible via the web, unauthenticated attackers can strike at just the right moment to take control of a system without needing a password or an existing user account.
Security firms have already documented a massive surge in activity following the discovery. Wordfence reported over eighteen thousand targeted requests in less than twenty four hours alone, while other telemetry data showed coordinated attempts originating from international IP addresses. This suggests that automated bots may be scanning the internet specifically for sites currently undergoing maintenance.
While patches were released late last month to close this gap, many administrators have yet to secure their installations. The urgency has reached such a peak that federal civilian executive branch agencies have been given a strict deadline of November 6 to implement the fix, highlighting the potential risk to government infrastructure and private businesses alike who rely on the popular platform.
