Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time
WordPress sites can remain exposed to code execution while installing the fix for actively exploited CVE-2026-119977 through vulnerable updates.
More info