# CISA confirms active exploitation of WordPress core flaw in software upgrades

CISA confirmed that hackers are exploiting a WordPress core vulnerability during software upgrades. Active exploitation raises urgency for WordPress administrators to apply fixes and secure affected sites. The flaw matters because WordPress powers a large share of websites worldwide.

**Importance:** 4/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/11/cisa-confirms-hackers-exploiting.html) — Wed, 04 Nov 2026 11:13:11 +0530