CRITICAL 9.8 CVE-2026-49921 Published 8 Sept 2026

WordPress Core Remote Code Execution

Worried this affects one of your servers?

WordPress core is affected by a memory safety issue that could lead to remote code execution.

This vulnerability is due to a heap buffer overflow in multiple locations within WordPress.

No user interaction is required for exploitation, and it does not need additional execution privileges.

Reference: CVE-2026-49921 on NVD

← Back to Security News