Serial number: AV26-1117
Date: November 3, 2026
As of October 31, 2026, WordPress is affected by a vulnerability in the following product:
- WordPress Core
- Prior to 7.1.4
On November 3, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-119977 to their Known Exploited Vulnerabilities (KEV) Database.
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.