---
title: CISA Gives Agencies Three Days to Patch Exploited WordPress Flaw
description: The US cyber agency now counts WordPress’s upgrade-window code execution bug among actively exploited flaws. Federal agencies have days to patch.
canonical_url: https://codekeeper.co/ticker/cisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw
---

[Vulnerabilities](https://codekeeper.co/ticker/tag/vulnerabilities) | [Software security](https://codekeeper.co/ticker/tag/software-security)

# CISA Gives Agencies Three Days to Patch Exploited WordPress Flaw

The US cyber agency now counts WordPress’s upgrade-window code execution bug among actively exploited flaws. Federal agencies have days to patch.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Nov 5, 2026

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

CISA added CVE-2026-119977, the WordPress Core upgrade flaw patched on October 28, to its Known Exploited Vulnerabilities catalog on November 3, 2026, citing evidence of active exploitation. Federal civilian agencies must fix it by November 6. CISA hasn’t said who is behind the attacks or how many sites were compromised. The flaw, rated CVSS 8.1 (High), affects versions 4.7 through 7.1.3. During a full core upgrade, files staged under wp-content/upgrade can briefly be reached from the web, letting an attacker with good timing hijack the installer and point it at their own database. No login is needed. WordPress 7.1.4 fixes it, with backported releases for older branches down to 4.7.39; versions 4.6 and earlier get no fix. Admins should confirm the update installed, block web access to wp-content/upgrade until it does, and check logs for requests to PHP files in that folder. Source: [Cybersecurity News](https://cybersecuritynews.com/wordpress-core-vulnerability-exploited/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-gives-agencies-three-days-to-patch-exploited-wordpress-flaw%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Vulnerabilities Bitter Spy Group Rewrites Malware in Rust for South Asia Attacks Nov 3, 2026](https://codekeeper.co/ticker/south-asian-cyber-espionage-group-bitter-targets-with-upgraded-malware)

[Vulnerabilities TightVNC Viewer Flaw Runs Attacker Code Ahead of VNC Login Nov 2, 2026](https://codekeeper.co/ticker/tightvnc-code-execution-vulnerability-update-now)

[Vulnerabilities Rogue Claude Code Extension Tried SSH Backdoor on Cursor Users Nov 2, 2026](https://codekeeper.co/ticker/fake-claude-code-extensions-vs-code)

[Vulnerabilities Attackers Probe WordPress Updater RCE Flaw 60,000+ Times a Day Nov 2, 2026](https://codekeeper.co/ticker/wordpress-security-vulnerability-attacks)