# Correction: a content-management flaw was disclosed a day earlier than recorded, so its pre-disclosure candidacy is withdrawn

- **Artifact ID:** CHQ-CORR-2026-030
- **Status:** IN FORCE
- **Public record:** https://record.cybersecurityhq.com/corrections/chq-corr-2026-030
- **Machine-record SHA-256:** `a4167c255d1b27ac67ed2b73de324bd8698772d84ebb913ab4537d300b1a07f7`

## Complete structured record

```json
{
  "id": "CHQ-CORR-2026-030",
  "class": "CORRECTION",
  "subtype": "counting",
  "status": "IN FORCE",
  "authority": "DM ratified 2026-11-12",
  "effective": "2026-11-12",
  "published": "2026-11-12",
  "title": "Correction: a content-management flaw was disclosed a day earlier than recorded, so its pre-disclosure candidacy is withdrawn",
  "what_was_wrong": "The record gave 29 October 2026 as the first public disclosure of WordPress Core CVE-2026-119977, taken from a secondary advisory date, and carried the entry as a candidate for Pre-Disclosure Exploitation because an exploitation attempt was observed on 28 October.",
  "what_is_true": "The vendor's own announcement is timestamped 28 October at 17:13 UTC. The first observed attempt followed at about 20:39 UTC the same day. With a timestamp on both events the chronology is determinate and post-disclosure.",
  "what_changed": "The disclosure date is corrected to 28 October and the candidate status is withdrawn; the entry is recorded as not in shape for the condition. The previous values are kept in the row note. The attempt telemetry is kept as evidence of attempts, not of compromise.",
  "what_did_not_change": "No count, rating, Outlook or Watch. The entry's routing as a reinforcing entry on the edge condition stands.",
  "control_analysis": "A secondary date stood in for the primary. The audit that found it asked for the chronology to be marked indeterminate; reading the primaries showed it was determinate, which is the stronger correction. Reading the vendor primary for the disclosure date is a protocol rule, not a mechanical control.",
  "found_by": "An external adversarial audit, verified by CHQ against the primaries."
}
```