CVE-2026-119977 | WordPress up to 7.1.3 on WordPress Upgrade code injection

A vulnerability was found in WordPress on WordPress. It has been classified as critical. Affected is an unknown function of the component Upgrade. Performing a manipulation results in code injection.

This vulnerability was named CVE-2026-119977. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More