vulnhighUnderground · Vulnerability
KEV agrega CVE-2026-119977 — WordPress / WordPress Core
Ocorrido3 de nov. de 2026 · 00:00 UTC
Detectado4 de nov. de 2026 · 11:57 UTC
FonteUnderground · Vulnerability
Ref. externaCVE-2026-119977
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades.
- cve_id
- CVE-2026-119977
- vendor_product
- WordPress / WordPress Core
Nenhum evento relacionado nas últimas 48h.