CISA flags WordPress RCE flaw as actively exploited in attacks

CISA has issued a warning to federal agencies about active exploitation of a recently patched high-severity remote code execution (RCE) vulnerability in WordPress. The flaw is being actively exploited in the wild by attackers. CISA's alert signals that the vulnerability poses significant risk, particularly to government and enterprise environments running WordPress. Federal agencies are urged to apply the available patch promptly. The advisory underscores the ongoing targeting of widely-used CMS platforms as vectors for initial access and compromise.