vulnhighUnderground · Vulnerability
KEV agrega CVE-2026-119977 — WordPress / WordPress Core
Ocurrido3 nov 2026 · 00:00 UTC
Detectado4 nov 2026 · 11:57 UTC
FuenteUnderground · Vulnerability
Ref. externaCVE-2026-119977
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades.
- cve_id
- CVE-2026-119977
- vendor_product
- WordPress / WordPress Core
Sin eventos relacionados en las últimas 48h.