CISA adds exploited WordPress upgrade flaw to vulnerability catalog

Image: Primary

Published Wednesday, November 4, 2026 · 3:04 AM EST

CISA has added WordPress Core vulnerability CVE-2026-119977 to its Known Exploited Vulnerabilities catalog, citing active exploitation. Federal Civilian Executive Branch agencies must apply fixes by November 6, 2026. The flaw allows attackers without a site account to execute server code during a brief window in a complete WordPress Core upgrade. Predictable staging paths accessible through the web create the opening. Patches were released late last month. Wordfence recorded more than 18,500 requests targeting staged installer paths during the first 21 hours after public disclosure. Exploitation requires catching the short upgrade window.

Sources

The Hacker News

In this story

US Government

Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Robotics AI

Chinese embodied AI companies raised approximately $13B in first half of 2026

Chinese embodied AI companies raised approximately $13B across 322 deals in the first half of 2026, up 5x year over year, Reuters reported, citing ITjuzi.

Science

MIT-led team receives up to $38 million for disease-monitoring patch

An MIT-led team has received funding from the U.S. Advanced Research Projects Agency for Health for a four-year project worth up to $38 million to develop a wearable patch that continuously monitors biomarkers of heart disease and sepsis.

Capital

EloElo raises $80M Series C at $500M valuation

India-based EloElo raised an $80M Series C led by Hornbill Capital and NBCU at a $500M valuation, TechCrunch reported. Its Story TV microdrama app has 33M+ estimated active users. The financing comes as more than 118 million users watch microdramas every month in India.

Capital AI

Crediflow AI raises €1.8 million to expand loan processing automation

Manchester-based Crediflow AI has secured €1.8 million (£1.5 million) to develop its commercial loan processing platform, expand its engineering and product team, and bring on more banks and specialist lenders.

Capital

JawBuddy raises €818k to fund jaw therapy study and reimbursement efforts

Leipzig startup JawBuddy has raised €818k in pre-seed funding led by healthcare platform HALBZEIT to fund an efficacy study and pursue health insurer reimbursement for its jaw therapy app. The total includes the Business Angel Bonus from Sächsische Aufbaubank.

Products AI

Meta enters euro bond market to finance AI investment

Meta Platforms is entering the euro bond market for the first time, Bloomberg reported. The borrowing joins a surge of debt issuance by the largest technology companies as they seek to finance trillions of dollars in artificial intelligence investments.