The 48-Hour Patch Window Is Dead. Here’s What’s Actually Happening.
A critical WordPress exploit was weaponized in under 48 hours of public disclosureโturning a routine patch into a ticking clock. The real vulnerability isn’t in the code; it’s in the operational infrastructure that forces defenders to move at human speed while attackers automate. If you manage web infrastructure, assume every disclosure is already being exploited.