WordPress sites can remain exposed to code execution while installing the fix for actively exploited CVE-2026-119977 through ...