CRITICAL
9.8 CVE-2026-49921 Published 8 Sept 2026
WordPress Core Remote Code Execution
Worried this affects one of your servers?
WordPress core is affected by a memory safety issue that could lead to remote code execution.
This vulnerability is due to a heap buffer overflow in multiple locations within WordPress.
No user interaction is required for exploitation, and it does not need additional execution privileges.
Reference: CVE-2026-49921 on NVD
← Back to Security News