CISA

Update: CISA Says the WordPress Core RCE Is Being Exploited. It Now Has a CVE

An update to my WordPress core RCE post. What’s new It now has an ID: CVE-2026-119977, a time-of-check/time-of-use race reported by Picus Security’s Umut Bayram CISA…