A critical vulnerability has been discovered in the popular WordPress content management system that allows attackers to execute arbitrary code on the web server.
The vulnerability has been assigned the number CVE-2026-87902.
The good news is that on September 22, WordPress released an update that patches it.
The bad news is that the first attempts to exploit CVE-2026-87902 were detected just a few hours after the patch was released.
Therefore, all companies whose corporate websites or blogs run on this platform are advised to update immediately.
More Information:
https://www.kaspersky.co.uk/blog/cve-20 ... ity/30915/
Published Date: Sep 25, 2026
Vulnerabilities has been mentioned in this article:
CVE-2026-87902
CVE-2026-87902: Critical Vulnerability in WordPress
-
Starburst-David
- Posts: 405
- Joined: Wed Feb 11, 2026 8:31 pm