Vulnerabilities
2026-11-04 · 6 d ago
Source: The Hacker News
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
Summary
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of Time-of-check Time-of-use (TOCTOU) race condition that could be exploited to achieve arbitrary code
For more information, read the full story at the original source: The Hacker News ↗