CVE-2026-119977
EXPLOITED
HIGH 8.8
WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition (CVE-2026-119977)
WordPress · WordPress Core
EPSS 1.20%
Update the affected WordPress Core plugin/core to the patched release for CVE-2026-119977 and rotate admin keys.
Read the fix →