WordPress 7.1.4 Fixes 22 Security Vulnerabilities, Including RCE Flaw Under Active Attack

WordPress released version 7.1.4 on October 28, addressing 22 security vulnerabilities, including an unauthenticated remote code execution flaw that attackers are actively exploiting, GBHackers reports. Administrators should verify the update is installed rather than assuming automatic background updates have completed.