CISA warns WordPress core flaw is under active attack
Agency adds CVE-2026-119977 to KEV catalog; federal agencies ordered to secure systems by Friday
The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are exploiting a recently patched high-severity WordPress Core vulnerability in the wild, adding the flaw to its Known Exploited Vulnerabilities catalog and ordering federal agencies to secure their systems by Friday.