CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
· thehackernews.com · popularity 21/100 · 0 similar stories today · Cybersecurity (Technology & Consumer Electronics)
Read the original at thehackernews.com →
Summary
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of Time-of-check Time-of-use (TOCTOU) race condition that could be exploited to achieve arbitrary code
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 1.