WordPress core RCE under active attack; Wordfence blocks 58,693 attempts
CVE-2026-119977 in WordPress 4.7 through 7.1.3 can yield unauthenticated PHP execution during brief upgrades; 7.1.4 patches it.
1
Stories per day · 30 days
1 stories, newest first · one card per story
Stories tagged #core-upgrade