Skip to content
Line of Sites

CISA Known Exploited Vulnerabilities

CVE-2026-119977: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability

WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable,...

Summary from the publisher's feed.

More in Exploited now