HeraldLoop
← Zurück zur Übersicht
2 QuellenVerfolgt seit vor 16 Std.

Hackers start exploiting critical WordPress flaw for code execution

TeilenXWhatsAppFacebookLinkedIn

Berichterstattung chronologisch

  1. Heute
  2. Neuestevor 5 Std.

    Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

    Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). "An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file

    The Hacker NewsThe Hacker News•info@thehackernews.com (The Hacker News)
  3. Gestern
  4. Erste Meldungvor 16 Std.

    Hackers start exploiting critical WordPress flaw for code execution

    Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]

    BleepingComputerBleepingComputer•Bill Toulas