Hackers are exploiting CVE-2026-87902 in WordPress, using a path traversal flaw to write PHP files and enable remote code execution. WordPress 7.1.2 fixes the issue. #WordPress #CVE202687902 #Patchstack

~Cybergcca~
WordPress CVE-2026-87902 is exploited in the wild; SolarWinds and HPE also require updates.
-
IOCs: CVE-2026-87902, CVE-2026-28325, CVE-2026-28324
-
#CVE202687902 #ThreatIntel #WordPress

An exploited WordPress RCE vulnerability (CVE-2026-87902) is under attack. Details and PoC exploit code are public. Patch your sites now.

#WordPress #CVE202687902 #RCE #Cybersecurity #Infosec #ZeroDay

WordPress 9.2: la falla crítica que afecta desde 2016

¿Tu WordPress no se actualiza hace meses? La vulnerabilidad WordPress 9.2 (CVE-2026-87902) afecta todas las versiones desde 2016. Parcheá hoy mismo.

#wordpress #cve202687902 #vulnerabilidadcritica #actualizacionwordpress #seguridadweb

WordPress 7.1.2 patches CVE-2026-87902, a critical unauthenticated path traversal bug in get_page_template() affecting 4.7.0-7.1.1. The flaw could load arbitrary PHP files and may lead to code execution. #WordPress #CVE202687902 #PHP

WordPress patched CVE-2026-87902, a critical core flaw in versions 4.7.0-7.1.1 that could let unauthenticated attackers load a PHP file and, on some servers, trigger code execution. #WordPress #CVE202687902 #PatchUpdate

WordPress 7.1.2 patches a critical WordPress RCE vulnerability (CVE-2026-87902). Update your site to prevent conditional remote code execution.

#WordPress #CVE202687902 #RCE #Cybersecurity #Infosec #WordPressSecurity