WordPress Flaw Under Active Attack: Hackers Target CVE-2026-87902 for Code Execution
ID: acf66539-e34e-58ad-a026-c5619f3366d7
STIX ID: report--acf66539-e34e-58ad-a026-c5619f3366d7
Feed Name: TechRepublic Security
CVE-2026-87902 is a critical unauthenticated path traversal vulnerability in WordPress Core (CVSS 9.2) that can enable remote code execution under certain conditions; researchers observed probing within hours of the patch release and rapid escalation to attempts to write executable files and web shells. Administrators are urged to update immediately to WordPress 7.1.2 (or backported fixes for older supported branches), review logs for suspicious pagename parameters and double-encoded traversal sequences, and inspect for unexpected or modified PHP files.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.