CISA adds WordPress TOCTOU race condition CVE-2026-119977 to KEV
1. Executive summary CISA added CVE-2026-119977, a time-of-check time-of-use race condition in WordPress Core, to the Known Exploited Vulnerabilities catalog
04 Nov 2026 · 7 min read
read →