
WordPress core flaw CVE-2026-119977 is being exploited: update to 7.1.4
CISA says attackers are exploiting a WordPress core bug that lets anyone run code on the server while a core upgrade is in progress. Every version from 4.7 to 7.1.3 is affected. Make sure each site is on 7.1.4 or its…