CISA flags WordPress RCE flaw as actively exploited in attacks

The US Cybersecurity and Infrastructure Security Agency issued an alert to federal agencies about active exploitation of a WordPress vulnerability in the wild. The flaw is described as high-severity and has been recently patched. CISA's warning underscores the risk to organizations running vulnerable versions of WordPress, particularly government entities.

Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.