On November 4, 2026, The Hacker News reported U.S., Infrastructure Agency, CISA. The figures I am keeping are CVE-2026-119977, 8.1. The framing is mine. Their sentences stay on their page.
The names I am willing to repeat are U.S., Infrastructure Agency, CISA, WordPress Core. The figures in the report are CVE-2026-119977, 8.1. The subject words I am keeping are vulnerability.
If this sits on a shop, a clinic, or a desk I run, I read the vendor notice before I tell anyone to patch.
Source I used: The Hacker News. The link is under this column.