Hackers start exploiting critical WordPress flaw for code execution

T1Covered by 1 source · first reported by BleepingComputer at 23 Sept, 18:31 UTC

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]

security

Sources

• T1Hackers start exploiting critical WordPress flaw for code executionBleepingComputer23 Sept, 18:31

Vulnerabilities

• CVE-2026-87902