Vulnerability · 1 source · latest 2h

CISA warns attackers are exploiting 18-year-old WordPress core flaw CVE-2026-119977

VULNERABILITYCVE-2026-119977redteam/daily · 1 source

Severity: High
Highest CVSS: 8.1
Exploited: Yes
Sources: 1

What happened

The US cyber security agency CISA has warned that hackers are actively exploiting an old weakness in WordPress, the popular website software. The flaw can let attackers take over websites while the core software is being updated, so site owners are being told to install the fix.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Update WordPress core to the fixed version as soon as possible.
Check whether your WordPress sites are running a core version affected by CVE-2026-119977.

Written by AI from the sources, checked against them

Read the full story at the source