NewsThe Hacker News

    CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

    Share
    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of Time-of-check Time-of-use (TOCTOU) race condition that could be exploited to achieve arbitrary code

    Linked advisories

    Affected vendors and products

    More on WordPress

    Other advisories

    Other news entries

    Source: https://thehackernews.com/2026/11/cisa-confirms-hackers-exploiting.html

    ID