{"id":6711,"date":"2026-11-04T20:03:00","date_gmt":"2026-11-04T20:03:00","guid":{"rendered":"https:\/\/itsolutions.ee\/uncategorized\/wordpress-vulnerability-cve-2026-119977\/"},"modified":"2026-11-04T20:03:00","modified_gmt":"2026-11-04T20:03:00","slug":"wordpress-vulnerability-cve-2026-119977","status":"publish","type":"post","link":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/","title":{"rendered":"WordPress Vulnerability CVE-2026-119977 Under Attack: Update Now"},"content":{"rendered":"<div class=\"its-tldr\">\n<p><strong>In short:<\/strong> The WordPress core vulnerability CVE-2026-119977 (CVSS 8.1) is being exploited: on 3 November 2026 the US cyber agency CISA added it to its catalogue of actively exploited vulnerabilities. Versions 4.7\u20137.1.3 are affected; the fix is WordPress 7.1.4. Update now and check your administrator accounts.<\/p>\n<\/div>\n<p>The <a href=\"https:\/\/itsolutions.ee\/en\/blog\/wordpress-7-1-4-security-update\/\">WordPress 7.1.4 security update<\/a> of 28 October fixed 22 security issues. One of them, <strong>CVE-2026-119977<\/strong>, is no longer a theoretical risk: attackers are already scanning for vulnerable sites at scale. On 3 November the US Cybersecurity and Infrastructure Security Agency (<strong>CISA<\/strong>) added it to its KEV catalogue (Known Exploited Vulnerabilities), which only lists flaws used in real attacks.<\/p>\n<h2>What is CVE-2026-119977?<\/h2>\n<ul>\n<li><strong>Type:<\/strong> a race condition (TOCTOU) in the WordPress core update process.<\/li>\n<li><strong>Severity:<\/strong> CVSS 8.1, high.<\/li>\n<li><strong>Affected versions:<\/strong> WordPress 4.7.0 to 7.1.3.<\/li>\n<li><strong>Fix:<\/strong> WordPress 7.1.4 (28.10.2026) and patched releases for older branches (7.0.8 down to 4.7.39).<\/li>\n<li><strong>Reported by:<\/strong> Picus Security researcher Umut Bayram.<\/li>\n<\/ul>\n<h2>How does the attack work?<\/h2>\n<p>When WordPress updates its core, it temporarily unpacks the new release into <code>wp-content\/upgrade<\/code>. On many servers that folder can be reached from the web. An attacker who sends a request at exactly the right moment can reach the staged installer and run their own PHP code on the server \u2013 no login and no user action needed. Because the staging folder exists for only a few seconds, attackers use scripts that poll thousands of sites in a row.<\/p>\n<h2>How widespread are the attacks?<\/h2>\n<ul>\n<li>More than <strong>18,500<\/strong> requests to staged installer paths were seen in the first 21 hours.<\/li>\n<li>According to Wordfence, <strong>12,600 to 63,000<\/strong> attack attempts were blocked per day (different sources and days).<\/li>\n<li>US federal agencies must fix the flaw by <strong>6 November 2026<\/strong>.<\/li>\n<\/ul>\n<p>No confirmed successful compromises have been reported publicly yet, but mass scanning shows that unpatched sites are a target.<\/p>\n<h2>What should you do now?<\/h2>\n<ol>\n<li><strong>Update WordPress to 7.1.4<\/strong> or to the latest patched release of your branch. Check the version under Dashboard \u2192 Updates.<\/li>\n<li><strong>Review administrator accounts.<\/strong> If you see an unknown user, remove it and change all passwords.<\/li>\n<li><strong>Verify core file integrity<\/strong> (e.g. with <code>wp core verify-checksums<\/code>) and look for unknown PHP files in <code>wp-content\/upgrade<\/code>.<\/li>\n<li><strong>Check server logs:<\/strong> requests to <code>wp-content\/upgrade\/\u2026php<\/code> are suspicious.<\/li>\n<li><strong>Ask your host or developer<\/strong> to block web access to <code>wp-content\/upgrade<\/code>, especially if you cannot update straight away.<\/li>\n<\/ol>\n<p>If you find signs of a break-in, do not delete the evidence before it is analysed. See our <a href=\"https:\/\/itsolutions.ee\/en\/services\/hacked-website-repair\/\">hacked WordPress website repair<\/a> service.<\/p>\n<h2>Why this matters for businesses in Estonia too<\/h2>\n<p>Attackers do not pick targets by country \u2013 their scripts go through every WordPress site they can find. If your website runs on WordPress and has not been updated this week, it is as exposed as any other site in the world. A hacked site can redirect visitors to scam pages, spread malware and lose Google\u2019s trust, and with it your <a href=\"https:\/\/itsolutions.ee\/en\/services\/seo-services\/\">SEO<\/a> rankings.<\/p>\n<h2>How to avoid this in future<\/h2>\n<p>Security updates should go live within days, not months. That is what <a href=\"https:\/\/itsolutions.ee\/en\/services\/wordpress-maintenance\/\">WordPress maintenance<\/a> is for: we watch for updates, test them with a backup and install security fixes as soon as they are released. If you only need updates, see <a href=\"https:\/\/itsolutions.ee\/en\/services\/wordpress-updates\/\">WordPress and plugin updates<\/a>. The recent <a href=\"https:\/\/itsolutions.ee\/en\/blog\/php2shell-php-vulnerability\/\">PHP2Shell vulnerability<\/a> showed that the server\u2019s PHP version matters just as much.<\/p>\n<h2>Frequently asked questions<\/h2>\n<div class=\"its-faq\">\n<details>\n<summary>\n<h3>Is my WordPress site vulnerable to CVE-2026-119977?<\/h3>\n<\/summary>\n<p>Yes, if it runs WordPress 4.7\u20137.1.3 and has not been updated. Version 7.1.4 or the latest patched release of your branch is safe.<\/p>\n<\/details>\n<details>\n<summary>\n<h3>Will automatic updates protect me?<\/h3>\n<\/summary>\n<p>Minor security updates install automatically by default, but on many sites they are disabled or fail. Check your version manually.<\/p>\n<\/details>\n<details>\n<summary>\n<h3>What does the CISA KEV catalogue mean?<\/h3>\n<\/summary>\n<p>It is the US cyber agency\u2019s list of vulnerabilities used in real attacks. Being added means the flaw must be fixed immediately.<\/p>\n<\/details>\n<details>\n<summary>\n<h3>What if my site has already been hacked?<\/h3>\n<\/summary>\n<p>Take the site offline if needed, keep a copy of the evidence, change passwords and clean the site. We help restore hacked WordPress sites.<\/p>\n<\/details>\n<\/div>\n<p>Want to be sure your site is updated and secure? Get a <a href=\"https:\/\/itsolutions.ee\/en\/website-audit\/\">free website audit<\/a> or <a href=\"https:\/\/itsolutions.ee\/en\/contact\/\">contact us<\/a>.<\/p>\n<h2>Sources<\/h2>\n<ul class=\"its-sources\">\n<li><a href=\"https:\/\/tech-insider.org\/wordpress-cve-2026-119977-cisa-kev-7-1-4-deadline-nov-6-2026\/\" target=\"_blank\" rel=\"noopener\">Tech Insider \u2013 WordPress CVE-2026-119977: CISA KEV, 7.1.4 and the 6 November deadline<\/a><\/li>\n<li><a href=\"https:\/\/cybersecuritynews.com\/wordpress-core-vulnerability-exploited\/\" target=\"_blank\" rel=\"noopener\">Cybersecurity News \u2013 CISA warns of WordPress core vulnerability exploited in attacks<\/a><\/li>\n<li><a href=\"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog\" target=\"_blank\" rel=\"noopener\">CISA \u2013 Known Exploited Vulnerabilities Catalog<\/a><\/li>\n<li><a href=\"https:\/\/wordpress.org\/news\/\" target=\"_blank\" rel=\"noopener\">WordPress.org News<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>CISA added the WordPress core vulnerability CVE-2026-119977 to its actively exploited list. Versions 4.7\u20137.1.3 are affected. What to do right now.<\/p>\n","protected":false},"author":0,"featured_media":6706,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[161],"tags":[164,173,188],"class_list":["post-6711","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-blog-news-en","tag-blog-security-en","tag-blog-wordpress-en"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>WordPress CVE-2026-119977: Update to 7.1.4 | IT Solutions<\/title>\n<meta name=\"description\" content=\"WordPress CVE-2026-119977 (CVSS 8.1) is under attack: CISA KEV 3.11.2026. Versions 4.7\u20137.1.3 affected, fixed in 7.1.4. 5 steps to protect your site.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"WordPress CVE-2026-119977: Update to 7.1.4 | IT Solutions\" \/>\n<meta property=\"og:description\" content=\"WordPress CVE-2026-119977 (CVSS 8.1) is under attack: CISA KEV 3.11.2026. Versions 4.7\u20137.1.3 affected, fixed in 7.1.4. 5 steps to protect your site.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/\" \/>\n<meta property=\"og:site_name\" content=\"IT Solutions Group\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/itsolutions.ee\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-04T20:03:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/itsolutions.ee\/wp-content\/uploads\/2026\/11\/cover-nov-a1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Pavel Zahharov\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pavel Zahharov\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/\"},\"author\":{\"name\":\"Pavel Zahharov\",\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/#\\\/schema\\\/person\\\/d335e6de88d1e3edc9ece769956dfd0c\"},\"headline\":\"WordPress Vulnerability CVE-2026-119977 Under Attack: Update Now\",\"datePublished\":\"2026-11-04T20:03:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/\"},\"wordCount\":691,\"publisher\":{\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/itsolutions.ee\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cover-nov-a1.jpg\",\"keywords\":[\"News\",\"Security\",\"WordPress\"],\"articleSection\":[\"Blog\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/\",\"url\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/\",\"name\":\"WordPress CVE-2026-119977: Update to 7.1.4 | IT Solutions\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/itsolutions.ee\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cover-nov-a1.jpg\",\"datePublished\":\"2026-11-04T20:03:00+00:00\",\"description\":\"WordPress CVE-2026-119977 (CVSS 8.1) is under attack: CISA KEV 3.11.2026. Versions 4.7\u20137.1.3 affected, fixed in 7.1.4. 5 steps to protect your site.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/#primaryimage\",\"url\":\"https:\\\/\\\/itsolutions.ee\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cover-nov-a1.jpg\",\"contentUrl\":\"https:\\\/\\\/itsolutions.ee\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cover-nov-a1.jpg\",\"width\":1600,\"height\":900,\"caption\":\"WordPressi haavatavus CVE-2026-119977 on r\u00fcnnakute all: uuenda kohe\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/blog\\\/wordpress-vulnerability-cve-2026-119977\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"WordPress Vulnerability CVE-2026-119977 Under Attack: Update Now\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/\",\"name\":\"IT Solutions Group\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/#organization\",\"name\":\"IT Solutions Group\",\"alternateName\":\"IT Solutions\",\"url\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/itsolutions.ee\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/itsolutions-logo.png\",\"contentUrl\":\"https:\\\/\\\/itsolutions.ee\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/itsolutions-logo.png\",\"width\":201,\"height\":45,\"caption\":\"IT Solutions Group\"},\"image\":{\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/itsolutions.ee\",\"https:\\\/\\\/www.instagram.com\\\/itsolutionsee\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/53392980\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/#\\\/schema\\\/person\\\/d335e6de88d1e3edc9ece769956dfd0c\",\"name\":\"Pavel Zahharov\",\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/itsolutions.ee\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/Screenshot-2025-08-27-at-20.14.35-232x300.png\",\"caption\":\"Pavel Zahharov\"},\"sameAs\":[\"https:\\\/\\\/itsolutions.ee\"],\"jobTitle\":\"Founder & CEO\",\"description\":\"Founder and CEO of IT Solutions. Since 2016 he has led more than 100 website, online store and business platform projects.\",\"url\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/about\\\/\",\"worksFor\":{\"@id\":\"https:\\\/\\\/itsolutions.ee\\\/en\\\/#organization\\\/\"},\"knowsAbout\":[\"Website development\",\"WordPress\",\"WooCommerce\",\"SEO\",\"ERP and CRM development\",\"Business process automation\",\"Artificial intelligence for business\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"WordPress CVE-2026-119977: Update to 7.1.4 | IT Solutions","description":"WordPress CVE-2026-119977 (CVSS 8.1) is under attack: CISA KEV 3.11.2026. Versions 4.7\u20137.1.3 affected, fixed in 7.1.4. 5 steps to protect your site.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/","og_locale":"en_US","og_type":"article","og_title":"WordPress CVE-2026-119977: Update to 7.1.4 | IT Solutions","og_description":"WordPress CVE-2026-119977 (CVSS 8.1) is under attack: CISA KEV 3.11.2026. Versions 4.7\u20137.1.3 affected, fixed in 7.1.4. 5 steps to protect your site.","og_url":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/","og_site_name":"IT Solutions Group","article_publisher":"https:\/\/www.facebook.com\/itsolutions.ee","article_published_time":"2026-11-04T20:03:00+00:00","og_image":[{"width":1600,"height":900,"url":"https:\/\/itsolutions.ee\/wp-content\/uploads\/2026\/11\/cover-nov-a1.jpg","type":"image\/jpeg"}],"author":"Pavel Zahharov","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Pavel Zahharov","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/#article","isPartOf":{"@id":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/"},"author":{"name":"Pavel Zahharov","@id":"https:\/\/itsolutions.ee\/en\/#\/schema\/person\/d335e6de88d1e3edc9ece769956dfd0c"},"headline":"WordPress Vulnerability CVE-2026-119977 Under Attack: Update Now","datePublished":"2026-11-04T20:03:00+00:00","mainEntityOfPage":{"@id":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/"},"wordCount":691,"publisher":{"@id":"https:\/\/itsolutions.ee\/en\/#organization"},"image":{"@id":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/#primaryimage"},"thumbnailUrl":"https:\/\/itsolutions.ee\/wp-content\/uploads\/2026\/11\/cover-nov-a1.jpg","keywords":["News","Security","WordPress"],"articleSection":["Blog"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/","url":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/","name":"WordPress CVE-2026-119977: Update to 7.1.4 | IT Solutions","isPartOf":{"@id":"https:\/\/itsolutions.ee\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/#primaryimage"},"image":{"@id":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/#primaryimage"},"thumbnailUrl":"https:\/\/itsolutions.ee\/wp-content\/uploads\/2026\/11\/cover-nov-a1.jpg","datePublished":"2026-11-04T20:03:00+00:00","description":"WordPress CVE-2026-119977 (CVSS 8.1) is under attack: CISA KEV 3.11.2026. Versions 4.7\u20137.1.3 affected, fixed in 7.1.4. 5 steps to protect your site.","breadcrumb":{"@id":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/#primaryimage","url":"https:\/\/itsolutions.ee\/wp-content\/uploads\/2026\/11\/cover-nov-a1.jpg","contentUrl":"https:\/\/itsolutions.ee\/wp-content\/uploads\/2026\/11\/cover-nov-a1.jpg","width":1600,"height":900,"caption":"WordPressi haavatavus CVE-2026-119977 on r\u00fcnnakute all: uuenda kohe"},{"@type":"BreadcrumbList","@id":"https:\/\/itsolutions.ee\/en\/blog\/wordpress-vulnerability-cve-2026-119977\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/itsolutions.ee\/en\/"},{"@type":"ListItem","position":2,"name":"WordPress Vulnerability CVE-2026-119977 Under Attack: Update Now"}]},{"@type":"WebSite","@id":"https:\/\/itsolutions.ee\/en\/#website","url":"https:\/\/itsolutions.ee\/en\/","name":"IT Solutions Group","description":"","publisher":{"@id":"https:\/\/itsolutions.ee\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/itsolutions.ee\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/itsolutions.ee\/en\/#organization","name":"IT Solutions Group","alternateName":"IT Solutions","url":"https:\/\/itsolutions.ee\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/itsolutions.ee\/en\/#\/schema\/logo\/image\/","url":"https:\/\/itsolutions.ee\/wp-content\/uploads\/2025\/02\/itsolutions-logo.png","contentUrl":"https:\/\/itsolutions.ee\/wp-content\/uploads\/2025\/02\/itsolutions-logo.png","width":201,"height":45,"caption":"IT Solutions Group"},"image":{"@id":"https:\/\/itsolutions.ee\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/itsolutions.ee","https:\/\/www.instagram.com\/itsolutionsee\/","https:\/\/www.linkedin.com\/company\/53392980\/"]},{"@type":"Person","@id":"https:\/\/itsolutions.ee\/en\/#\/schema\/person\/d335e6de88d1e3edc9ece769956dfd0c","name":"Pavel Zahharov","image":{"@type":"ImageObject","url":"https:\/\/itsolutions.ee\/wp-content\/uploads\/2025\/08\/Screenshot-2025-08-27-at-20.14.35-232x300.png","caption":"Pavel Zahharov"},"sameAs":["https:\/\/itsolutions.ee"],"jobTitle":"Founder & CEO","description":"Founder and CEO of IT Solutions. Since 2016 he has led more than 100 website, online store and business platform projects.","url":"https:\/\/itsolutions.ee\/en\/about\/","worksFor":{"@id":"https:\/\/itsolutions.ee\/en\/#organization\/"},"knowsAbout":["Website development","WordPress","WooCommerce","SEO","ERP and CRM development","Business process automation","Artificial intelligence for business"]}]}},"_links":{"self":[{"href":"https:\/\/itsolutions.ee\/en\/wp-json\/wp\/v2\/posts\/6711","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/itsolutions.ee\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/itsolutions.ee\/en\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/itsolutions.ee\/en\/wp-json\/wp\/v2\/comments?post=6711"}],"version-history":[{"count":0,"href":"https:\/\/itsolutions.ee\/en\/wp-json\/wp\/v2\/posts\/6711\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/itsolutions.ee\/en\/wp-json\/wp\/v2\/media\/6706"}],"wp:attachment":[{"href":"https:\/\/itsolutions.ee\/en\/wp-json\/wp\/v2\/media?parent=6711"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itsolutions.ee\/en\/wp-json\/wp\/v2\/categories?post=6711"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itsolutions.ee\/en\/wp-json\/wp\/v2\/tags?post=6711"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}