Intel
NewsThe Hacker News2026-09-24 05:36 UTCSMEPublic Sector

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). "An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file

Linked advisories

More on WordPress

Other advisories

Other news entries

Source: https://thehackernews.com/2026/09/attackers-exploit-wordpress-cve-2026.html

ID