High 8.1
CVE-2026-119977
Exploitation Attempts Targeting WordPress Core RCE Vulnerability (CVE-2026-119977)
Vendor / product: WordPress Core
Event date: 2026-10-28
Public PoC: Yes
First tracked by RiskWire: 2026-11-03
Sources & citations (4)
- WordPress RCE Vulnerability Exploited, 58,000+ Attacks Blocked rswebsols.com · 2026-11-02
- 60,000 WordPress RCE Attacks Reported in One Day rswebsols.com · 2026-11-02
- WordPress 7.1.4: Angriffe auf Sicherheitslücke windows-faq.de · 2026-11-02
- WordPress 7.1.4 Update Fixes Vulnerability After 63,000 Attacks rswebsols.com · 2026-11-03
References
See CVE-2026-119977 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →