Known Exploited Vulnerabilities November 03, 2026 · CISA KEV Catalog

CVE-2026-119977: Word Press Word Press Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability

WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-119977 WordPress
Related: CISA Adds One Known Exploited Vulnerability to Catalog Cyber Risks · Nov 03, 2026
CVE-2026-87902: Word Press Core Remote File Inclusion Vulnerability Known Exploited Vulnerabilities · Sep 25, 2026
CVE-2026-63030: Word Press Core Interpretation Conflict Vulnerability Known Exploited Vulnerabilities · Jul 21, 2026