CISA has added a high-severity TOCTOU race condition flaw in WordPress Core to its Known Exploited Vulnerabilities catalog. Tracked as CVE-2026-119977 with a CVSS score of 8.1, the vulnerability allows attackers to achieve arbitrary code execution during the software update process. Immediate patching is strongly advised for all administrators.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →