vulnhighUnderground · Vulnerability
KEV agrega CVE-2026-119977 — WordPress / WordPress Core
OccurredNov 3, 2026 · 00:00 UTC
DetectedNov 4, 2026 · 11:57 UTC
SourceUnderground · Vulnerability
External ref.CVE-2026-119977
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades.
- cve_id
- CVE-2026-119977
- vendor_product
- WordPress / WordPress Core
No related events in the past 48h.