CISA: WordPress RCE flaw actively exploited in attacks

CISA reported that attackers are actively exploiting the recently patched high-severity WordPress Core vulnerability CVE-2026-119977. The vulnerability was added to CISA’s Known Exploited Vulnerabilities Catalog. CISA urged all network defenders, including those in the private sector, to prioritize patching it.