Vulnerability · 1 source · latest 1h

CISA warns attackers are exploiting 18-year-old WordPress core flaw CVE-2026-119977

VULNERABILITYCVE-2026-119977redteam/daily · 1 source

Severity: High
Highest CVSS: 8.1
Exploited: Yes
Sources: 1

What happened

CISA has confirmed active exploitation of CVE-2026-119977, a WordPress core vulnerability that is reportedly 18 years old. The flaw allows attackers to hijack sites during core updates, and users are being urged to patch.

For IT people · Written by AI from 1 source · Wrong?

What to do

Update WordPress core to the fixed version as soon as possible.
Check whether your WordPress sites are running a core version affected by CVE-2026-119977.

Written by AI from the sources, checked against them

Read the full story at the source