Critical RCE Vulnerability in WordPress Core Exploited in the Wild

Searchlight Cyber has identified a critical pre-authentication RCE in WordPress Core impacting over 500 million sites; public proof-of-concept exploits are circulating and watchTowr reported early indications of exploitation in the wild. Site owners are urged to update to WordPress 7.0.2 or 6.9.5 immediately, and temporary mitigations (like blocking anonymous access to the batch API) may reduce risk but can affect legitimate use.