Topic

Cve 2026 119977

Coverage tagged cve 2026 119977.

Articles: 1
Desk: 1

Data graphic: CVSS 8.1 unauthenticated WordPress upgrade-window RCE, CVE-2026-119977, affecting WordPress 4.7 through 7.1.3, exploited and on CISA KEV with a 6 Nov 2026 due date, fixed in 7.1.4 and 24 backports.

criticalExploits Cve 2026 119977

WordPress Core Upgrade-Window RCE CVE-2026-119977 Is on CISA KEV: Fixed in 7.1.4 and 24 Backports

CISA lists WordPress Core 4.7 to 7.1.3 upgrade-window RCE CVE-2026-119977 as exploited, due 6 November. The fixed build for every branch, and how to check yours.

Nov 5 · 4 min