Wednesday, November 4, 2026 · 2 of 5CISA says attackers are exploiting WordPress core CVE-2026-119977 during upgrades; federal agencies must patch by FridayNov 4SecurityRead the full briefing · 20 stories