CISA adds exploited WordPress Core flaw to security catalog

Attackers are exploiting a WordPress Core vulnerability that can let malicious code run on website servers. The flaw, tracked as CVE-2026-119977, involves a race condition during software upgrades, according to The Hacker News. Cyber Security News reports that CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2026.

• The Hacker News reports a high-severity CVSS score of 8.1.

Covered by 4 publishers within 6 hours of the first report.

• BleepingComputer: CISA flags WordPress RCE flaw as actively exploited in attacks

Reporting4

THN The Hacker News CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades · info@thehackernews.com (The Hacker News) 12:43 AM

SAF Security Affairs U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog · Pierluigi Paganini 4:16 AM

CSN Cyber Security News CISA Warns of WordPress Core Vulnerability Exploited in Attacks to Execute Malicious Code · Guru Baran 4:34 AM

BC BleepingComputer CISA flags WordPress RCE flaw as actively exploited in attacks · Sergiu Gatlan 7:11 AM

Related

BC CISA adds two PHP2Shell flaws to exploited vulnerabilities catalog October 27

SAF U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog October 24

SAF U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog October 31