SecurityThe Hacker Newsabout 3 hours ago
WordPress Update Flaw Exposes Sites
6 min read
Picus Security researcher Umut Bayram warns that installing the WordPress 7.1.4 fix for CVE-2026-119997 can expose sites running versions 4.7 through 7.1.3 to attacks. The flaw allows attackers to run code on servers during updates because the installer unpacks files using old, unpatched code.
Level
Hype check
Tap to vote and see what everyone thinks.
