SecurityThe Next Webabout 2 hours ago
WordPress Flaw Exploited Hours After Patch
2 min read
Attackers began exploiting a critical WordPress flaw, CVE-2026-87902, within hours of the fix. WordPress patched version 7.1.2 on 22 September, rating it 9.2 CVSS. The bug lets unauthenticated attackers run code if the theme has a page- folder and pearcmd.php exists. Attacks peaked at over ten times initial volume by midday 23 September.
Level
Hype check
Tap to vote and see what everyone thinks.
