CriticalVulnerabilities
CISA adds WordPress Core race condition to exploited list
CVE-2026-119977, a time-of-check/time-of-use race in WordPress Core, is now on the KEV catalog based on evidence of active exploitation.
CISA
Velkrypt Wire
CVE-2026-119977, a time-of-check/time-of-use race in WordPress Core, is now on the KEV catalog based on evidence of active exploitation.