The US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-119977, the update-window flaw fixed in WordPress 7.1.4, to its Known Exploited Vulnerabilities catalog on November 3. It is the fourth WordPress core flaw in the catalog, and all four have been added since July. The catalog gives federal civilian agencies until November 6 to fix or mitigate this … Continue reading CISA Lists a Fourth WordPress Core Flaw Since July. WordPress Rates This One Low