Filtered by tag: zero-day × Clear
Critical WordPress Vulnerability Exploited Immediately After Disclosure
Matched: WordPress
A critical WordPress vulnerability, CVE-2026-87902, is being actively exploited immediately following public disclosure. The path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code on affected systems. Site administrators are urged to apply patches immediately, as the rapid exploitation highlights the risk of delays between vulnerability disclosure and remediation.
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
Matched: WordPress
A critical WordPress vulnerability, CVE-2026-87902 (CVSS 9.2), is being actively exploited within hours of disclosure. The flaw allows unauthenticated attackers to achieve remote code execution by manipulating page-template resolution to include arbitrary local PHP files, requiring no authentication to exploit.