CVE-2026-119977
Full vulnerability record from the local CVENow database.
Description
WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window.
Severity
HIGH
CVSS score
8.1
(v3.1)
Vulnerability status
Received
Source identifier
Published
2026-10-31 06:16:34.550000
Last modified
2026-10-31 06:16:34.550000
View original CVE JSON
{
"id": "CVE-2026-119977",
"sourceIdentifier": "[email protected]",
"published": "2026-10-31T06:16:34.550",
"lastModified": "2026-10-31T06:16:34.550",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "WordPress Foundation",
"product": "WordPress",
"defaultStatus": "unaffected",
"versions": [
{
"version": "4.7.0",
"lessThanOrEqual": "4.7.38",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.8.0",
"lessThanOrEqual": "4.8.33",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.9.0",
"lessThanOrEqual": "4.9.34",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.0.0",
"lessThanOrEqual": "5.0.30",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.1.0",
"lessThanOrEqual": "5.1.27",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.2.0",
"lessThanOrEqual": "5.2.29",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.3.0",
"lessThanOrEqual": "5.3.26",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.4.0",
"lessThanOrEqual": "5.4.24",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.5.0",
"lessThanOrEqual": "5.5.23",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.6.0",
"lessThanOrEqual": "5.6.22",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.7.0",
"lessThanOrEqual": "5.7.20",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.8.0",
"lessThanOrEqual": "5.8.18",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.9.0",
"lessThanOrEqual": "5.9.19",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.0.0",
"lessThanOrEqual": "6.0.17",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.1.0",
"lessThanOrEqual": "6.1.15",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.2.0",
"lessThanOrEqual": "6.2.14",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.3.0",
"lessThanOrEqual": "6.3.13",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.4.0",
"lessThanOrEqual": "6.4.13",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.5.0",
"lessThanOrEqual": "6.5.13",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.6.0",
"lessThanOrEqual": "6.6.10",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.7.0",
"lessThanOrEqual": "6.7.10",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.8.0",
"lessThanOrEqual": "6.8.11",
"versionType": "semver",
"status": "affected"
},
{
"version": "6.9.0",
"lessThanOrEqual": "6.9.10",
"versionType": "semver",
"status": "affected"
},
{
"version": "7.0.0",
"lessThanOrEqual": "7.0.7",
"versionType": "semver",
"status": "affected"
},
{
"version": "7.1.0",
"lessThanOrEqual": "7.1.3",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-367"
}
]
}
],
"references": [
{
"url": "https://core.trac.wordpress.org/browser/tags/7.1.3/src/wp-admin/includes/class-core-upgrader.php#L162",
"source": "[email protected]"
},
{
"url": "https://core.trac.wordpress.org/browser/tags/7.1.3/src/wp-admin/includes/class-wp-upgrader.php#L378",
"source": "[email protected]"
},
{
"url": "https://core.trac.wordpress.org/browser/tags/7.1.3/src/wp-admin/includes/update-core.php#L1549",
"source": "[email protected]"
},
{
"url": "https://core.trac.wordpress.org/browser/tags/7.1.3/src/wp-admin/setup-config.php#L282",
"source": "[email protected]"
},
{
"url": "https://core.trac.wordpress.org/browser/tags/7.1.4/src/wp-admin/includes/class-wp-upgrader.php#L346",
"source": "[email protected]"
},
{
"url": "https://core.trac.wordpress.org/browser/tags/7.1.4/src/wp-admin/includes/update-core.php#L1545",
"source": "[email protected]"
},
{
"url": "https://wordpress.org/news/2026/10/wordpress-7-1-4/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4b4da0cf-d9f4-47c4-a0e8-6c4dc5a6f250?source=cve",
"source": "[email protected]"
}
]
}