HeraldLoop
← Volver a las noticias
2 fuentesSeguimiento desde hace 16 h

Hackers start exploiting critical WordPress flaw for code execution

CompartirXWhatsAppFacebookLinkedIn

Cobertura cronológica

  1. Hoy
  2. Más recientehace 5 h

    Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

    Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). "An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file

    The Hacker NewsThe Hacker News•info@thehackernews.com (The Hacker News)
  3. Ayer
  4. Primera noticiahace 16 h

    Hackers start exploiting critical WordPress flaw for code execution

    Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]

    BleepingComputerBleepingComputer•Bill Toulas