Threat actors are actively exploiting a critical remote code execution vulnerability in WordPress, tracked as CVE-2026-87902 with a CVSS score of 9.2. The flaw allows unauthenticated attackers to execute arbitrary code via local file inclusion within page template resolution. Administrators are strongly advised to apply available patches immediately to prevent full system compromise.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →