CVE · coverage timeline
CVE-2026-119977WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
1 article from 1 outlet on 3 Nov. First reported by CISA, the day CISA added it to KEV.
- Articles
- 1
- all time · from 1 outlet
- Days covered
- 1
- a single day
- Busiest day
- 1
- no day with more than one
- Last 7 days
- 0.1a day
- coverage began 3h ago
- Report to KEV
- 0days
- listed 3 Nov
- Federal deadline
- 3d0hleft
- Fri 6 Nov, 23:59 UTC
Coverage over time
1 article · on 3 Nov
One article so farThe timeline fills in once a second report names CVE-2026-119977. Until then: CISA, Tue 3 Nov, 20:31 UTC.
Articles
1 article1 article
- CISA Flags Exploited WordPress Flaw Allowing Unauthenticated Code ExecutionCISA · first report · official notice
No articles in this range.