Security alert

9 November 2026

Urgent: WordPress core flaw CVE-2026-119977 is being exploited

An unauthenticated code execution flaw in WordPress core upgrades is under active attack. Here is who is affected and what to do today.