CISA Warns of WordPress Vulnerability Exploited in the Wild (CVE-2026-119977)

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a WordPress core vulnerability to the Known Exploited Vulnerabilities catalog. CISA urges users to patch the vulnerability before November 6, 2026. Tracked as CVE-2026-119977, the vulnerability in WordPress Core may allow an attacker to execute arbitrary code on affected servers. This is a time-of-check time-of-use…

Source