WordPress security advisory (AV26-952)

T1Covered by 1 source · first reported by Canadian Centre for Cyber Security at 23 Sept, 15:35 UTC

Serial number: AV26-952 Date: September 23, 2026 As of September 22, 2026, WordPress is affected by a vulnerability in the following product: WordPress Prior to 7.1.2 Open-source reporting indicates that CVE-2026-87902 is being exploited in the wild. The Cyber Centre encourages users and…

devsecurity

Sources

• T1WordPress security advisory (AV26-952)Canadian Centre for Cyber Security23 Sept, 15:35

Vulnerabilities

• CVE-2026-87902