Security News CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades TheHackerNews Daniel Bender 04 Nov 2026 Share CISA confirms active exploitation of CVE-2026-119977, a WordPress Core flaw that allows unauthenticated code execution during upgrades.