WordPress Core vulnerability actively exploited: update now
WordPress Core versions 4.7 through 7.1.3 contain vulnerability CVE-2026-119977, which attackers are actively exploiting. The NCSC assesses the likelihood of exploitation as low, but the potential damage as high.
CERT24