Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

T2Covered by 1 source · first reported by The Hacker News at 24 Sept, 05:36 UTC

Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). "An unauthenticated attacker…

security

Sources

• T2Attackers Exploit WordPress CVE-2026-87902 Within Hours of DisclosureThe Hacker News24 Sept, 05:36

Vulnerabilities

• CVE-2026-87902