WordPress Upgrade Window Under Active Attack

CISA says attackers are exploiting WordPress Core CVE-2026-119977 to race the brief full-upgrade window and run code on servers. Update to a patched release now, then check for compromise.