Security Signal

← Cyber news feed

Reported 80ExploitedFirst seen 4 Nov 2026, 05:43 UTC

CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

Coverage

HeadlineSourceTypePublished
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades The Hacker NewsSecurity press4 Nov 2026, 05:43 UTC

Vulnerabilities

CVEExploited (CISA KEV)CVSSEPSS
CVE-2026-119977 Yes, since 3 Nov 2026 — —

CVSS from NVD; EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days.

Why this score

Most trusted source70
Independent organisations reporting it (1)+0
Confirmed by an official source or CISA KEV+10
Confidence80 · Reported
We link to the original reporting and don’t reproduce it. Read the sources above for the full details.