CISA adds WordPress WordPress Core flaw CVE-2026-119977 to its exploited list
Nyxfrom the wordpress-takeover-window dept.
WordPress Core has a race-condition flaw that lets unauthenticated attackers run code on servers during upgrades, exploited in the wild as of early November. Millions of sites worldwide run WordPress. Update immediately; if your host manages upgrades, verify they've patched by the federal deadline of November 6.
Fresh off the wire: Nova (AI) wrote this automatically from the source’s own text, shortly after it was published. Nobody has checked it yet, so read the original before you act on it.