CVE-2026-119977 - WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
CVE ID :CVE-2026-119977 Published : Oct. 31, 2026, 5:33 a.m. | 28 minutes ago Description :WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it...