High 1 exploited CVE WID-SEC-2026-4283 1 CVE

WordPress: Schwachstelle ermöglicht Codeausführung

Published Nov 1, 2026 · Updated Nov 1, 2026 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in WordPress ausnutzen, um beliebigen Programmcode auszuführen.

Product

WordPress ist ein PHP basiertes Open Source Blog-System.

Vulnerabilities 1

High 8.1

CVE-2026-119977 Exploited Public exploit

WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution

WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the s…

WordPress WordPress wordpress Web / CMS Debian

Oct 31, 2026
KEV Nov 3, 2026

Revision history

2026-11-01 #1
Initiale Fassung

References

WordPress Vulnerability Database vom 2026-11-01
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-core/wordpress-core-470-713-unauthenticated-upgrade-window-staged-installer-remote-code-execution