A Vulnerability in WordPress Could Allow for Remote Code Execution
ID: ef0405ed-7da6-5bf5-a0d1-04ca6f821cce
STIX ID: report--ef0405ed-7da6-5bf5-a0d1-04ca6f821cce
Feed Name: CISecurity.org Advisories
Threat Score
A WordPress vulnerability (CVE-2026-87902) is reported where an unauthenticated attacker can manipulate get_page_template() to include readable local .php files outside the active theme directory, which under certain server and theme conditions can lead to remote code execution (RCE).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.