WordPress security advisory (AV26-1117)
Serial number: AV26-1117 Date: November 3, 2026 As of October 31, 2026, WordPress is affected by a vulnerability in the following product: WordPress Core Prior to 7.1.4 On November 3, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-119977 to their Known Exploited…
Sources
- T1WordPress security advisory (AV26-1117)Canadian Centre for Cyber Security
Vulnerabilities
Why this score
| Signal | Points |
|---|---|
| kev added | 50 |
| kev short fuse — 3 days to remediate | 15 |
| ssvc active | 35 |
| cvss high — 8.1 | 10 |
| widely deployed | 15 |