Intelligence online17 sources monitored10 actively exploited 7d34 published 24hChecked recently
Product

WordPress Core

Made by WordPress. 1 of its vulnerabilities are known to have been exploited.

Coverage

HighPatchExploitedCISA KEV

WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-119977) is being actively exploited, CISA warns

CISA added CVE-2026-119977 (WordPress WordPress Core) to its Known Exploited Vulnerabilities catalog on November 3, 2026, which means there is reliable evidence of exploitation in the wild. WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable…

Why it matters

CISA lists this as exploited in the wild. Unpatched WordPress and WordPress Core systems are exposed to active attacks now.

Patch

Apply the vendor's security update for WordPress and WordPress Core.

CISA Known Exploited Vulnerabilities · 2 sources
SMBEnterpriseDevelopers+1

Recent intelligence

The latest developments from the last 30 days, newest first.

  1. AdvisoryKEV

    WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-119977) is being actively exploited, CISA warns

    Basis: CISA Known Exploited Vulnerabilities (government advisory)

  2. Added to CISA KEVCVE-2026-119977

    CVE-2026-119977 added to CISA KEV: WordPress WordPress Core, WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability

    Basis: CISA Known Exploited Vulnerabilities catalog

Actively exploited

CVE-2026-119977CVSS 8.1

WordPress WordPress Core

WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability

Added Nov 3, 2026Fed. due Nov 6, 2026Coverage →