Why are attackers hammering WordPress with 63,000 exploits?A high-severity remote code execution flaw in WordPress Core triggered nearly 63,000 exploit attempts in a single day after patches shipped — and it still carries no CVE identifier.What happened: WordPress released a fix for a remote code execution bug in its Core codebase, and attackers began mass-scanning for vulnerable sites almost immediately. Within 24 hours, researchers logged close to 63,000 exploitation attempts against unpatched installs. The flaw was never assigned a CVE ID, which complicates tracking and patch prioritization for defenders relying on vulnerability feeds.Key numbers: Nearly 63,000 exploit attempts recorded in the first 24 hours1 high-severity RCE flaw in WordPress Core, patched without a CVEZero CVE identifiers assigned, leaving feed-based scanners blindWhy it matters: WordPress powers over 40% of the web, so an RCE in Core is effectively an internet-wide target, and attackers clearly weaponized it faster than most site owners could update.Bottom line: A missing CVE ID is not a missing threat — patch WordPress Core first and check your feeds later.