CERT24Vulnerability in WordPress may lead to server misuse: update nowLoading data…
CERT24Threat Observatory
Period

Vulnerability in WordPress may lead to server misuse: update now

A vulnerability, CVE-2026-87902, has been found in WordPress. Under certain circumstances, an unauthenticated attacker may cause a specially crafted file to be loaded outside WordPress’s normal themes and execute their own code on the server hosting the website.

← Back to intelligence

Vulnerability in WordPress may lead to server misuse: update now

A vulnerability, CVE-2026-87902, has been found in WordPress. Under certain circumstances, an unauthenticated attacker may cause a specially crafted file to be loaded outside WordPress’s normal themes and execute their own code on the server hosting the website.