Critical WordPress Flaw Is Being Exploited Right Now: A Security Update Checklist for 2026

How to secure WordPress site beginners checklist: laptop displaying a padlock Secured badge

If your business website runs on WordPress, this is one alert worth stopping for. A critical vulnerability in WordPress core is being actively exploited right now — no login required — and on September 25, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added it to its Known Exploited Vulnerabilities (KEV) catalog, the list … Read more