CVE-2026-87902

notes

CVE-2026-87902 — WordPress Core: WordPress Core Remote File Inclusion Vulnerability

1. Executive summary CVE-2026-87902 is a remote file inclusion flaw in WordPress Core that lets an unauthenticated attacker force get_page_template() page-template

26 Sep 2026 · 7 min read read →

notes

Critical WordPress Vulnerability Exploited Immediately After Disclosure

1. Executive summary CVE-2026-87902 is a path traversal flaw in WordPress page-template resolution that lets an unauthenticated attacker include a chosen local .php

24 Sep 2026 · 7 min read read →

notes

WordPress 7.1.2 fixes critical unauthenticated path traversal vulnerability (CVE-2026-87902)

1. Executive summary WordPress released version 7.1.2 on 2026-09-23 to fix CVE-2026-87902, an unauthenticated path traversal in get_page_template(

23 Sep 2026 · 5 min read read →