From RuntimeWire · RuntimeWire · · 40s
CISA Confirms WordPress Flaw Under Active Exploitation
CISA reports WordPress upgrade flaw being actively exploited by attackers.
In brief
CISA reports WordPress upgrade flaw being actively exploited by attackers. CISA confirmed a WordPress upgrade vulnerability (CVE-2026-119977) is under active exploitation as of November 3rd, 2026, requiring federal agencies to patch by November 6th, 2026. Originally reported by RuntimeWire.
CISA Confirms Vulnerability
CISA added CVE-2026-119977 to its Known Exploited Vulnerabilities catalog on November 3rd, 2026, citing active exploitation.
Attackers Exploit Staging Path
Attackers can turn seconds spent unpacking an official WordPress update into unauthenticated code execution by polling a predictable staging path.
Federal Agencies Must Patch
Federal Civilian Executive Branch agencies have until November 6th, 2026, to remediate the flaw under Binding Operational Directive 26-04.
In short
CISA confirmed a WordPress upgrade vulnerability (CVE-2026-119977) is under active exploitation as of November 3rd, 2026, requiring federal agencies to patch by November 6th, 2026.
