CVE-2026-119977

BreakingWordPress Core flaw CVE-2026-119977 is being actively exploited, CISA warns
CISA added the WordPress Core vulnerability to its Known Exploited Vulnerabilities catalog on November 3, 2026, with a federal remediation deadline of November 6, 2026.