CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

T2Critical 100Covered by 1 source · first reported by The Hacker News at 04 Nov, 05:43 UTC

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of…

security

Sources

• T2CISA Confirms Hackers Exploiting WordPress Core Flaw During Software UpgradesThe Hacker News04 Nov, 05:43

Vulnerabilities

• CVE-2026-119977