{"uuid": "4ff7ae1b-6eee-423c-878a-8f39baab2167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-7a251540-fa15b9ff60d90c49", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a WordPress Core flaw, tracked as CVE-2026-87902 (CVSS score of 9.2), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-87902 allows an unauthenticated attacker to make the get_page_template() function include a readable local [\u2026]U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog", "creation_timestamp": "2026-09-26T08:10:53.403344Z"}