CISA flags WordPress RCE flaw as actively exploited in attacks

The US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress vulnerability in the wild. […]

Source: BleepingComputer · 2026-11-04