Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Wordpress
Core
Wordpress Core vulnerabilities
wordpress
,
wordpress
core
+1 more
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
CVE-2026-119977
In KEV
Public exploit
Fix available
8.1
High
October 31, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open