CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

The US Cybersecurity and Infrastructure Security Agency has confirmed that a WordPress Core security flaw is being actively exploited by hackers. This high-severity vulnerability is related to a Time-of-check Time-of-use race condition that can be exploited to achieve arbitrary code execution. The agency has added the flaw to its Known Exploited Vulnerabilities catalog, indicating that it is being used in actual attacks. The vulnerability is exploited during software upgrades, allowing hackers to take advantage of the brief window of time when the system is most vulnerable. The vulnerability has a CVSS score of 8.1, indicating a significant level of severity.