SecurityThe Hacker Newsabout 4 hours ago
WordPress RCE Flaw Exploited Within Hours
2 min read
Attackers began exploiting CVE-2026-87902, a critical WordPress remote code execution flaw, within hours of its disclosure. Previdian recorded 68 exploitation attempts starting September 23, 2026, with requests from US and Indonesia IPs. The vulnerability requires specific theme and server preconditions, so mass exploitation is expected but few actual compromises. Administrators should update to WordPress 7.1.2 or equivalent patched versions immediately.
Level
Hype check
Tap to vote and see what everyone thinks.