{"uuid": "b86921a4-e215-4a3a-9d24-d89e4f10edb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwacqkpmmk2d", "content": "CVE-2026-87902: how close is your WordPress to remote code execution?\n\nWordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unauthenticated loc\u2026\n#hackernews #news", "creation_timestamp": "2026-09-24T03:27:15.079925Z"}