Attackers targeted a critical WordPress flaw on patch day
A critical WordPress Core vulnerability was patched on September 22, 2026, and attackers began targeting it the same day, according to Patchstack telemetry. WordPress.org’s release documentation says WordPress 7.1.2 was …