Wordpress
-
VULNCISA lists WordPress Core upgrade-window race condition CVE-2026-119977 as exploited
A race in WordPress Core full-package upgrades lets unauthenticated attackers run code in versions 4.7 through 7.1.3; CISA now lists it as exploited.