CISA Confirms Active Exploitation of Critical WordPress Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed active exploitation of a high-severity Time-of-check Time-of-use (TOCTOU) race condition vulnerability (CVE-2026-119977) in WordPress Core. This flaw allows unauthenticated attackers to execute arbitrary code on affected servers during software upgrades. Patches were released last month, urging users to update immediately to mitigate the risk.