Advisories

Actively exploited vulnerabilities worth acting on, each with a ticket you can paste into your tracker.

• Your forgotten WordPress marketing site just landed on CISA's exploited list 4 November 2026

  CVE-2026-119977 affects WordPress Core 4.7 through 7.1.3 and is on CISA's exploited list. What it is, how worried to be, and a ticket to paste into your tracker.