{"vulnerability": "CVE-2026-87902", "sightings": [{"uuid": "33f1cd02-f721-40ee-9add-edbee00ee9bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mw4l6pdyc62t", "content": "WordPress 7.1.2 patches a critical WordPress RCE vulnerability (CVE-2026-87902). Update your site to prevent conditional remote code execution.\n\n#WordPress #CVE202687902 #RCE #Cybersecurity #Infosec #WordPressSecurity", "creation_timestamp": "2026-09-22T15:47:40.692017Z"}, {"uuid": "d486d8f0-3d3c-4968-a3de-60d544574863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/wpsecurityninja.bsky.social/post/3mw4oshkdvq2g", "content": "WordPress shipped another security release in 5 days.\n\n7.1.1 on 17 Sep. 7.1.2 today (CVE-2026-87902).\nUpdate core, then inactive themes and comments.\n\nwpsecurityninja.com/wp2shell/?ut...", "creation_timestamp": "2026-09-22T16:52:25.138826Z"}, {"uuid": "a2557a25-7b58-4e2d-ac43-59b91c5d8353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw53t5nf7j27", "content": "WordPress patched CVE-2026-87902, a critical core flaw in versions 4.7.0-7.1.1 that could let unauthenticated attackers load a PHP file and, on some servers, trigger code execution. #WordPress #CVE202687902 #PatchUpdate", "creation_timestamp": "2026-09-22T20:45:27.435519Z"}, {"uuid": "524c998c-fd60-4a5b-87b6-a1bda516537e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/technotenshi.bsky.social/post/3mw553ntzsc2o", "content": "WordPress patched CVE-2026-87902 (CVSS 9.2), an unauthenticated path traversal that can lead to RCE. Fixed in 7.1.2, backported to all branches back to 4.7.37.\n\n#InfoSec #WordPress #Vulnerability #CVE", "creation_timestamp": "2026-09-22T21:08:07.439998Z"}, {"uuid": "5f27c353-cc6f-46c4-b871-44a3d42fad59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/pingoru.bsky.social/post/3mw56w25cas2m", "content": "\u26a0\ufe0f IONOS IT is reporting a Incident since 21:34 UTC\n\n\"Aggiornamento di sicurezza critico: vulnerabilit\u00e0 del core di WordPress (CVE-2026-87902)\"\n\nAffects: Hosting Wordpress\n\nLive timeline \u2192 https://pingoru.io/providers/ionos-it/incidents/11511414\n\n#IONOSIT #IONOSITDown", "creation_timestamp": "2026-09-22T21:40:44.553127Z"}, {"uuid": "505ca2cf-3c7d-4ec3-a9b7-e7c768e81281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/pingoru.bsky.social/post/3mw5757cisi2w", "content": "\u26a0\ufe0f IONOS US is reporting a Incident since 21:37 UTC\n\n\"Critical Security Update: WordPress Core Vulnerability (CVE-2026-87902)\"\n\nAffects: Wordpress Hosting, Wordpress Pro\n\nLive timeline \u2192 https://pingoru.io/providers/ionoscom/incidents/11511415\n\n#IONOSUS #IONOSUSDown", "creation_timestamp": "2026-09-22T21:44:44.792543Z"}, {"uuid": "74f82648-4d77-409f-816d-974e3c0f3541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/pingoru.bsky.social/post/3mw57eefcce2m", "content": "\u26a0\ufe0f IONOS Canada is reporting a Incident since 21:38 UTC\n\n\"Critical Security Update: WordPress Core Vulnerability (CVE-2026-87902)\"\n\nAffects: Wordpress Hosting, Wordpress Pro\n\nLive timeline \u2192 https://pingoru.io/providers/ionos-canada/incidents/11511422\n\n#IONOSCanada #IONOSCanadaDown", "creation_timestamp": "2026-09-22T21:48:45.088090Z"}, {"uuid": "92da6542-c86a-4cbb-beac-6c9bf13d3513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/pingoru.bsky.social/post/3mw57hwrng52d", "content": "\u26a0\ufe0f Fasthosts is reporting a Incident since 21:40 UTC\n\n\"Critical Security Update: WordPress Core Vulnerability (CVE-2026-87902)\"\n\nAffects: WordPress Hosting\n\nLive timeline \u2192 https://pingoru.io/providers/fasthosts/incidents/11511427\n\n#Fasthosts #FasthostsDown", "creation_timestamp": "2026-09-22T21:50:44.853218Z"}, {"uuid": "89140a11-aa8d-4206-8122-2493a6d18a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/appinn.bsky.social/post/3mw5tbz7yks2p", "content": "2026\u5e749\u670823\u65e5\uff0cWordPress \u7206\u51fa 9.2 \u5206\u7684\u4e25\u91cd\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u767b\u5f55\u5373\u53ef\u5728\u670d\u52a1\u5668\u4e0a\u8fd0\u884c\u4ee3\u7801\u3002\u6f0f\u6d1e\u7f16\u53f7 CVE-2026-87902\uff0c\u8bf7\u52a1\u5fc5\u5347\u7ea7\u81f3\u6700\u65b0\u7248\u672c 7.1.2\u3002@Appinn \u6839\u636e W3Techs 2026 \u5e74 9 \u6708 22 \u65e5\u7684\u6700\u65b0\u7edf\u8ba1\uff0c\u5168\u7403\u7ea6 40.2% \u7684\u7f51\u7ad9\u90fd\u5728\u4f7f\u7528", "creation_timestamp": "2026-09-23T03:45:21.045911Z"}, {"uuid": "32fd353d-a42d-4650-8a99-c252d8077abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/fortrabbit.com/post/3mw647katym2g", "content": "Busy security week. Keep your software updated:\n- WordPress core, back to 4.7: CVE-2026-87902\n- Craft CMS 5, fixed in 5.10.13: CVE-2026-92591, CVE-2026-92593\n- Composer, fixed in 2.10.3: CVE-2026-59944", "creation_timestamp": "2026-09-23T06:25:01.871890Z"}, {"uuid": "07279729-2bf8-417c-b66a-42cacad66fa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/appinn.bsky.social/post/3mw5zyqcjwh2n", "content": "2026\u5e749\u670823\u65e5\uff0cWordPress \u7206\u51fa 9.2 \u5206\u7684\u4e25\u91cd\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u767b\u5f55\u5373\u53ef\u5728\u670d\u52a1\u5668\u4e0a\u8fd0\u884c\u4ee3\u7801\u3002\u6f0f\u6d1e\u7f16\u53f7 CVE-2026-87902\uff0c\u8bf7\u52a1\u5fc5\u5347\u7ea7\u81f3\u6700\u65b0\u7248\u672c 7.1.2\u3002@Appinn \u6839\u636e W3Techs 2026 \u5e74 9 \u6708 22 \u65e5\u7684\u6700\u65b0\u7edf\u8ba1\uff0c\u5168\u7403\u7ea6 40.2% \u7684\u7f51\u7ad9\u90fd\u5728\u4f7f\u7528", "creation_timestamp": "2026-09-23T05:45:26.227353Z"}, {"uuid": "ae42a9b4-95bc-41a8-a6a5-ea66a55c6b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mw62spzfr52i", "content": "\ud83c\udde8\ud83c\uddf5 WordPress CVE-2026-87902 (9,2/10) : un clic peut compromettre un site \u2014 passez en 7.1.2.\nhttps://www.cyberattaque.org/cve-2026-87902-wordpress-une-faille-critique-permet-de-prendre-le-controle-dun-site-apres-un-simple-clic/", "creation_timestamp": "2026-09-23T05:59:58.059809Z"}, {"uuid": "f9f19969-705c-4e95-ac00-90eaf3e8ee79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mw67ueqsnz22", "content": "WordPress core flaw CVE-2026-87902 allows unauthenticated RCE. Update to 7.1.2 now to stay safe. #WordPress #Security #CVE2026 #RemoteCodeExecution #WebSecurity #UpdateNow https://thedailytechfeed.com/unauthenticated-rce-flaw-in-wordpress-core-puts-sites-at-risk/", "creation_timestamp": "2026-09-23T07:30:22.258403Z"}, {"uuid": "1050d957-c385-4ba0-bc41-7272cb945b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-0cacd50c-85d97e0568eaf4e5", "content": "WordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unauthenticated local file inclusion, tracked as CVE-2026-87902 (CVSS score of 9.2), which stems of how the CMS resolves page templates, with a real path to remote code execution. [\u2026]CVE-2026-87902: how close is your WordPress to remote code execution? - Security Affairs", "creation_timestamp": "2026-09-23T08:28:49.199340Z"}, {"uuid": "cd9cdd2d-5415-41ba-9f2b-682f4f440682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mw6d4wo2lyl2", "content": "WordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unauthenticated local file inclusion, tracked as CVE-2026-87902 (CVSS score of 9.2), which stems of how [\u2026]", "creation_timestamp": "2026-09-23T08:28:52.887342Z"}, {"uuid": "9abc7990-77c4-46e4-875d-0d7e77bc427b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mw6drm33pk2a", "content": "CVE-2026-87902: how close is your WordPress to remote code execution?\n\nsecurityaffairs.com/199564/hacki...\n\n#Cybersecurity #Cyber #SituationalAwareness", "creation_timestamp": "2026-09-23T08:40:24.660700Z"}, {"uuid": "4430048c-5fad-4e94-a139-470012f90d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/117319482734196730", "content": "WordPress unauthenticated LFI to RCE PoC https://github.com/dinosn/cve-2026-87902-wordpress-lfi-lab", "creation_timestamp": "2026-09-23T08:47:20.419358Z"}, {"uuid": "54e70c77-b924-4ff2-9808-de86c46fc9e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mw6e647nz4l2", "content": "WordPress unauthenticated LFI to RCE PoC https://github.com/dinosn/cve-2026-87902-wordpress-lfi-lab", "creation_timestamp": "2026-09-23T08:47:24.241961Z"}, {"uuid": "66d2a084-f087-4093-9289-7976c691877a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mw6fk66x7e2j", "content": "WordPress 7.1.2\u3001\u8a8d\u8a3c\u4e0d\u8981\u306e\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u91cd\u5927\u8106\u5f31\u6027\u3092\u4fee\u6b63(CVE-2026-87902)\n\nWordPress\u306f\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u30a2\u30af\u30c6\u30a3\u30d6\u30c6\u30fc\u30de\u306e\u30d5\u30a9\u30eb\u30c0\u5916\u304b\u3089\u4efb\u610f\u306ePHP\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u8fbc\u307e\u305b\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u91cd\u5927\u306a\u6b20\u9665\u3092\u4fee\u6b63\u3059\u308b\u305f\u3081\u3001\u30d0\u30fc\u30b8\u30e7\u30f37.1.2\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u30b5\u30fc\u30d0\u30fc\u3068\u30a2\u30af\u30c6\u30a3\u30d6\u30c6\u30fc\u30de\u304c\u7279\u5b9a\u306e\u6761\u4ef6\u3092\u6e80\u305f\u3059\u30b5\u30a4\u30c8\u3067\u306f\u3001\u653b\u6483\u8005\u304c\u3055\u3089\u306b\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042", "creation_timestamp": "2026-09-23T09:12:02.132175Z"}, {"uuid": "314e086b-f386-4a86-b4a8-f2c994153068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mw6fnnnxps2m", "content": "WordPress 7.1.2 fixes critical unauthenticated path traversal vulnerability (CVE-2026-87902)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/09/23/c...\n\n#cybersecurity #cybersecuritynews #securityupdate #vulnerability #websecurity #CMS #CVE @wordpress.org @wordpress.com", "creation_timestamp": "2026-09-23T09:14:01.644463Z"}, {"uuid": "58b87db8-6d24-4624-b2b3-16ac3e847d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mw6fuzuuig24", "content": "WordPress released a critical patch on September 22, 2023, for a vulnerability (CVE-2026-87902) that allows attackers to execute code on some servers without an account. The flaw affects versions 4.7.0 to 7.1.1, with a CVSS score of 9.2. Users are advised to update to version 7.1.", "creation_timestamp": "2026-09-23T09:18:07.927528Z"}, {"uuid": "8707585f-9a9b-4d1d-b013-d932f39670bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://t.me/ctinow/257234", "content": "CVE-2026-87902: how close is your WordPress to remote code execution?\nhttps://ift.tt/8JzwOtS", "creation_timestamp": "2026-09-23T10:00:04.753214Z"}, {"uuid": "0392b189-03a8-431a-b72a-ed38980db5d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mw6ib2abwm2l", "content": "WordPress corregge una falla critica sfruttabile senza login: quando pu\u00f2 portare a RCE\nUna falla critica nel Core di WordPress consente a un attaccante non autenticat...\nhttps://www.ilsoftware.it/wordpress-falla-critica-rce-cve-2026-87902-senza-login/", "creation_timestamp": "2026-09-23T10:00:37.066383Z"}, {"uuid": "380fbb1c-0a37-4fdc-bd47-4d4c37ea77e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mw6iybptxk26", "content": "WordPress 7.1.2 fixes critical unauthenticated path traversal vulnerability (CVE-2026-87902)\n\nwww.helpnetsecurity.com/2026/09/23/c...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-09-23T10:13:38.557368Z"}, {"uuid": "9527cdd2-54e5-4d1d-8481-914b71bfc35a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-87902.yaml", "content": "", "creation_timestamp": "2026-09-23T12:00:05.337965Z"}, {"uuid": "53724836-fd73-4b08-9026-09eae3ae4249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0389", "content": "", "creation_timestamp": "2026-09-23T12:15:04.091630Z"}, {"uuid": "bacf447a-2fdc-4512-9654-fc8e732fd87b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wordpress-poc-pubbliche-per-lo-sfruttamento-di-nuove-vulnerabilita", "content": "", "creation_timestamp": "2026-09-23T12:45:02.198168Z"}, {"uuid": "b389207b-adab-4827-99f2-3fceae3083ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6sunsosm2k", "content": "\ud83d\udd17 CVE : CVE-2026-87902", "creation_timestamp": "2026-09-23T13:10:32.505480Z"}, {"uuid": "6892def9-0b5f-48dc-a0b4-02389dd24e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/wpsecurityninja.bsky.social/post/3mw6u67rv5u23", "content": "If you stopped at Click2Shell / 7.1.1, you are not done.\n\nCVE-2026-87902 is unauth LFI in core template resolution. Patchstack saw probes the same day.\n\nUpdate to 7.1.2 or your backport. Hunt logs for odd pagename + page_id.\n\nAlready patched? Drop a \u2705. Agency life? Pass it to your clients.", "creation_timestamp": "2026-09-23T13:33:47.850258Z"}, {"uuid": "6fe41be9-43f8-46fd-aded-e0ddb2ef112f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mw6udz2kxp2p", "content": "WordPress 9.2: la falla cr\u00edtica que afecta desde 2016\n\n\u00bfTu WordPress no se actualiza hace meses? La vulnerabilidad WordPress 9.2 (CVE-2026-87902) afecta todas las versiones desde 2016. Parche\u00e1 hoy mismo.\n\n#wordpress #cve202687902 #vulnerabilidadcritica #actualizacionwordpress #seguridadweb", "creation_timestamp": "2026-09-23T13:37:01.960376Z"}, {"uuid": "e6b5c2cb-b0d6-4773-a7b3-88df25da18c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mw6z3urygu2e", "content": "An exploited WordPress RCE vulnerability (CVE-2026-87902) is under attack. Details and PoC exploit code are public. Patch your sites now.\n\n#WordPress #CVE202687902 #RCE #Cybersecurity #Infosec #ZeroDay", "creation_timestamp": "2026-09-23T15:01:58.106923Z"}, {"uuid": "5f43f8b0-36a2-4692-bfc5-82017841edfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw74m6gtgh23", "content": "~Cybergcca~\nWordPress CVE-2026-87902 is exploited in the wild; SolarWinds and HPE also require updates.\n-\nIOCs: CVE-2026-87902, CVE-2026-28325, CVE-2026-28324\n-\n#CVE202687902 #ThreatIntel #WordPress", "creation_timestamp": "2026-09-23T16:04:46.219342Z"}, {"uuid": "480f6d55-f137-4311-a8c7-1691d3a7c47c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheid-in-wordpress-kan-leiden-tot-servermisbruik-update-nu", "content": "", "creation_timestamp": "2026-09-23T16:15:18.528371Z"}, {"uuid": "91b8c149-4d8e-4a67-8efa-2a1cd45e4762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/wordpress-security-advisory-av26-952", "content": "", "creation_timestamp": "2026-09-23T16:15:32.292022Z"}, {"uuid": "e8bf0a5c-b25c-4bf0-b8d7-42de8441b793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/wptips.com/post/3mw7bhfv6s72b", "content": "WordPress 7.1.2 patches CVE-2026-87902, a critical path traversal flaw that allows unauthenticated remote code execution. Update immediately. #WordPress #Wordfence #Security", "creation_timestamp": "2026-09-23T17:31:34.987960Z"}, {"uuid": "88c823e8-8389-4c8b-80b7-d085df8f74c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mw7et65i2v2j", "content": "Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed.", "creation_timestamp": "2026-09-23T18:31:50.604159Z"}, {"uuid": "7227147f-7d06-422d-8811-50e8d3465c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117321864004781832", "content": "\ud83d\udea8[POC] CVE-2026-87902: WordPress Core versions up to and including 7.1.1 are affected by a Local File Inclusion vulnerability in the locate_template() function.\nGitHub: https://github.com/abraxas/CVE-2026-87902\nCredit: @abraxas_null (X)", "creation_timestamp": "2026-09-23T18:52:56.022326Z"}, {"uuid": "c2d0b9a2-c3d3-4f4d-a799-4929a256def5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw7gge4skt26", "content": "Hackers are exploiting CVE-2026-87902 in WordPress, using a path traversal flaw to write PHP files and enable remote code execution. WordPress 7.1.2 fixes the issue. #WordPress #CVE202687902 #Patchstack", "creation_timestamp": "2026-09-23T19:00:28.042467Z"}, {"uuid": "dea177b2-57f2-4db7-8e61-488b841b04c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mw7hogd5yb2n", "content": "Threat actors have begun exploiting CVE-2026-87902 in WordPress, writing files to disk that run shell commands when accessed.", "creation_timestamp": "2026-09-23T19:22:52.539243Z"}, {"uuid": "c694247a-e1e7-4c0f-89a1-a6968c71231c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw7huqjb4t2l", "content": "\ud83e\udd16 CVE-2026-87902: critical WordPress flaw now actively exploited \u2014 attackers write files to disk that execute shell commands when accessed. Patch now.\n\nhttps://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution/", "creation_timestamp": "2026-09-23T19:26:23.984381Z"}, {"uuid": "c1bfb5ec-1625-4d16-8e2b-4ea3e721eaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution/", "content": "Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]", "creation_timestamp": "2026-09-23T22:00:43.051895Z"}, {"uuid": "21d3bb1f-c3c3-445a-b6e8-6aef16b0d6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/projectdiscovery.bsky.social/post/3mw7vb2aho22f", "content": "\ud83d\udea8 CVE-2026-87902: WordPress remote code execution. Discover every WordPress site you run and see which ones are exploitable.\n\nTry for free with Neo: neo.projectdiscovery.io/sign-up?utm_...\n\n\"Find my WordPress sites and test them for CVE-2026-87902. Ask me for my domains, CIDRs, or ASNs.\"", "creation_timestamp": "2026-09-23T23:25:56.109141Z"}, {"uuid": "a9bf4bf7-f1d5-41d1-8ed2-13cc4205d26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mw7yjuuglv2c", "content": "CVE-2026-87902: Attackers Started Probing WordPress Sites Hours After the Patch", "creation_timestamp": "2026-09-24T00:24:33.225905Z"}, {"uuid": "29c66cc8-566d-4ea2-85ff-9c5b21ab3766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/news.hada.io/post/3mwa24z64pk2r", "content": "WordPress, \ub85c\uadf8\uc778 \uc5c6\uc774 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \uac00\ub2a5\ud55c \ucde8\uc57d\uc810 \uc218\uc815\n\n\ud14c\ub9c8 \ubc16\uc758 PHP \ud30c\uc77c\uc744 \ubd88\ub7ec\uc62c \uc218 \uc788\ub294 \uacbd\ub85c \uac80\uc99d \ubb38\uc81c\ub85c, \ud2b9\uc815 \ud14c\ub9c8\uc640 \uc11c\ubc84 \uc870\uac74\uc774 \ub9de\uc73c\uba74 \uc778\uc99d \uc5c6\uc774 \uc545\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. CVE-2026-87902, \uc2ec\uac01\ub3c4 9.2 Critical\uc774\uba70 7.1.2\uc5d0\uc11c \uc218\uc815\ub410\uc2b5\ub2c8\ub2e4. 4.7 \uacc4\uc5f4\uae4c\uc9c0 \ud328\uce58\uac00 \uc81c\uacf5\ub429\ub2c8\ub2e4.", "creation_timestamp": "2026-09-24T00:53:09.682653Z"}, {"uuid": "be6a10de-280f-4a7a-9c01-200404d2aa89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/cyberkendra.com/post/3mwa6mp3zsk25", "content": "WordPress 7.1.2 fixes CVE-2026-87902, a critical no-login file inclusion flaw in core that can lead to code execution on some servers.\nwww.cyberkendra.com/2026/09/cve-...\n\n#wordpress #webdev #security", "creation_timestamp": "2026-09-24T02:13:34.937774Z"}, {"uuid": "ec4dfe10-b633-43e6-8dda-5dbe0dfcc1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwaaxflra42e", "content": "Exploited WordPress RCE Vulnerability: PoC Released for CVE-2026-87902\uff08\u5b9f\u60aa\u7528\u3055\u308c\u308bWordPress\u306e\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\u3001PoC\u3082\u516c\u958b\uff09 #SecurityOnline (Sep 24)\n\nsecurityonline.info/exploited-wo...", "creation_timestamp": "2026-09-24T02:55:16.919592Z"}, {"uuid": "123ef7c3-65bf-4242-a153-12d213e6c494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwac7jglow2z", "content": "WordPress RCE Vulnerability CVE-2026-87902: Critical Unauthenticated Flaw Exploited in the Wild\uff08WordPress\u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u4e0d\u8981RCE\u8106\u5f31\u6027\u3001\u516c\u958b\u76f4\u5f8c\u304b\u3089\u653b\u6483\u3092\u89b3\u6e2c\uff09 #SecurityOnline (Sep 23)\n\nsecurityonline.info/wordpress-rc...", "creation_timestamp": "2026-09-24T03:17:43.475113Z"}, {"uuid": "b86921a4-e215-4a3a-9d24-d89e4f10edb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwacqkpmmk2d", "content": "CVE-2026-87902: how close is your WordPress to remote code execution?\n\nWordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unauthenticated loc\u2026\n#hackernews #news", "creation_timestamp": "2026-09-24T03:27:15.079925Z"}, {"uuid": "e90b2bdd-f484-417b-b03a-28cb8c79523a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwaeubmwm62y", "content": "\ud83d\udcf0 CVE-2026-87902 Mulai Dieksploitasi, Hacker Targetkan WordPress untuk Eksekusi Kode\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/24/cve-2026-87902-wordpress-rce/\n\n#cpanel #cve #cybersecurity #php #rce #remoteCodeExecution #vulnerability #webSecurity #wordpress #wordpressSecu", "creation_timestamp": "2026-09-24T04:05:07.431196Z"}, {"uuid": "77d272c2-6c5d-4c6a-be20-0802b075f19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/wordpress-remote-code-execution-vulnerability_20260924", "content": "", "creation_timestamp": "2026-09-24T04:45:01.756957Z"}, {"uuid": "01dfa8a4-8177-4693-8c49-ff8fca5a1111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwajwg4rqc2r", "content": "\ud83e\udd16 CVE-2026-87902: critical WordPress flaw actively exploited. Attackers write files to disk that execute shell commands on access \u2014 patch and audit webroots for webshells.\n\nhttps://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution/", "creation_timestamp": "2026-09-24T05:35:47.870134Z"}, {"uuid": "363353d0-f8a3-4aa5-8861-39a2bfd83585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mwak77jepq2n", "content": "Hackers Exploit Critical WordPress Flaw for Code\u00a0Execution\n\nHackers are actively exploiting CVE-2026-87902, a critical WordPress flaw that can allow attackers to write malicious files and execute shell commands.", "creation_timestamp": "2026-09-24T05:40:43.828114Z"}, {"uuid": "35253ad2-7502-4ff0-96e4-10a040751039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mwanmp5ywy2a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-86296: 25 interactions\nCVE-2026-7273: 20 interactions\nCVE-2026-58704: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-94127: 10 interactions\nCVE-2026-69836: 7 interactions\nCVE-2026-87902: 7 interactions\n", "creation_timestamp": "2026-09-24T06:41:57.630290Z"}, {"uuid": "19144415-2d9f-4fda-a6d2-bc9ddcff056e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44555", "content": "Hackers start exploiting critical WordPress flaw for code execution\n\nThreat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]\nhttps://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution/", "creation_timestamp": "2026-09-23T23:00:37.000000Z"}, {"uuid": "e698a0ee-13c2-4842-bd3d-2c04fd9c0654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "exploited", "source": "https://t.me/thehackernews/10148", "content": "\u26a1 Attackers are exploiting WordPress CVE-2026-87902 within hours of disclosure.\n\nThe attacks use pearcmd.php to write attacker-controlled PHP files to disk, but only when specific theme and server conditions are met.\n\n\ud83d\udd17 How the exploit works \u2192 https://thehackernews.com/2026/09/attackers-exploit-wordpress-cve-2026.html", "creation_timestamp": "2026-09-24T05:57:05.000000Z"}, {"uuid": "c1b4244e-081b-46df-9d89-b525dbd4307c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/10132", "content": "\u203c\ufe0f URGENT - WordPress issues patch a new critical flaw (CVE-2026-87902) that requires no account and can lead to code execution on some servers.\n\nVersions 4.7.0 through 7.1.1 are affected.\n\nHere's how the flaw works: https://thehackernews.com/2026/09/wordpress-issues-patch-for-critical.html", "creation_timestamp": "2026-09-22T18:20:59.000000Z"}, {"uuid": "035a0e1d-5759-49e5-881e-1f5b293c7c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0389", "content": "De ontwikkelaars van WordPress hebben een kwetsbaarheid verholpen in WordPress.\n\n Een kwaadwillende kan de kwetsbaarheid met kenmerk CVE-2026-87902 misbruiken, om zonder authenticatie een lokaal PHP-bestand buiten de actieve themamappen door WordPress te laten inladen. Onder bepaalde voorwaarden met betrekking tot het actieve thema en de serverconfiguratie kan de kwetsbaarheid leiden tot het uitvoeren van willekeurige code op de server. Hierdoor kan een kwaadwillende mogelijk toegang krijgen tot gevoelige gegevens, wijzigingen aanbrengen of verdere controle verkrijgen over de getroffen WordPress-installatie.", "creation_timestamp": "2026-09-23T09:47:46.000000Z"}, {"uuid": "aace7490-3cd0-4689-8a8b-6e8b79d47baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwaq4afbjg2c", "content": "CVE-2026-87902 enables unauthenticated path traversal leading to remote code execution in affected WordPress setups.\n", "creation_timestamp": "2026-09-24T07:26:25.888072Z"}, {"uuid": "58cb814c-92ad-4364-a72e-1b413ce22e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mwaq4f7kqz2n", "content": "CVE-2026-87902 enables unauthenticated path traversal leading to remote code execution in affected WordPress setups.\n", "creation_timestamp": "2026-09-24T07:26:30.950431Z"}, {"uuid": "d194755c-81eb-44c5-b8bd-40f2e8b4b4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwaq4o5kqp2x", "content": "WordPress\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u516c\u958b\u76f4\u5f8c\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u308b\n\n\u516c\u958b\u3055\u308c\u305f\u3070\u304b\u308a\u306eWordPress\u306e\u8106\u5f31\u6027\u304c\u516c\u958b\u304b\u3089\u6570\u6642\u9593\u4ee5\u5185\u306b\u60aa\u7528\u3055\u308c\u59cb\u3081\u3001\u3059\u3067\u306b\u5b9f\u969b\u306e\u4fb5\u5bb3\u306b\u307e\u3067\u767a\u5c55\u3057\u3066\u3044\u308b\u3068\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dPatchstack\u304c\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 CVE-2026-87902\uff08CVSS\u30b9\u30b3\u30a29.2)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001WordPress\u306e\u30da\u30fc\u30b8\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u89e3\u6c7a\u51e6\u7406\u306b\u5b58\u5728\u3059\u308b\u30d1", "creation_timestamp": "2026-09-24T07:26:40.149276Z"}, {"uuid": "1d20e33e-93ee-4084-9e8d-3f6459321e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/2k115.bsky.social/post/3mwass2m3is2l", "content": "CVE-2026-87902: an unauthenticated file inclusion flaw in WordPress core (4.7.0\u20137.1.1), patched in 7.1.2. It can lead to RCE under specific server configurations. Active exploitation attempts began hours after the fix.", "creation_timestamp": "2026-09-24T08:14:25.038254Z"}, {"uuid": "78af0b58-34ac-49d9-907e-bdebb80e7bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwatxjd4th2i", "content": "CVE-2026-87902 enables unauthenticated remote code execution in WordPress when specific theme and readable local PHP file conditions are met.\n", "creation_timestamp": "2026-09-24T08:35:22.358751Z"}, {"uuid": "4b35468b-160e-43c2-aaf1-28d6e70b59d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mwatytjqc72z", "content": "CVE-2026-87902 enables unauthenticated remote code execution in WordPress when specific theme and readable local PHP file conditions are met.\n", "creation_timestamp": "2026-09-24T08:36:06.905971Z"}, {"uuid": "b18896d6-a0d3-4596-abe5-e6eb019aeb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mwaudxfycs2v", "content": "Alright Morty. WordPress shipped CVE-2026-87902, CVSS 9.2, so get_page_template can yoink pearcmd.php and gift unauthenticated RCE. Exploiters started the same day as 7.1.2. Your blog's page-templates folder is the open bar. day267.018", "creation_timestamp": "2026-09-24T08:42:22.032190Z"}, {"uuid": "4c0de4ac-c734-4827-b5ab-468d598cac87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/2k115.bsky.social/post/3mwauh27fe22e", "content": "CVE-2026-87902: unauthenticated file inclusion in WordPress core (4.7.0\u20137.1.1), patched in 7.1.2 (CVSS 9.2). Can lead to RCE under specific server setups. Exploitation attempts detected within hours of release. Update now.\n\u200b#InfoSec #CyberSecurity #WordPress", "creation_timestamp": "2026-09-24T08:44:05.052438Z"}, {"uuid": "ef49cd61-7a42-47ff-9e49-fcf12e8d07e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://t.me/ctinow/257311", "content": "Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure\nhttps://ift.tt/OcElxV6", "creation_timestamp": "2026-09-24T08:24:13.000000Z"}, {"uuid": "8da3bdae-9c65-4457-bb46-6c5bcf39b31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/montxt.bsky.social/post/3mwaxz5lg7m2l", "content": "Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure  https://thehackernews.com/2026/09/attackers-exploit-wordpress-cve-2026.html", "creation_timestamp": "2026-09-24T09:47:51.870939Z"}, {"uuid": "977c644a-bfed-479e-b6de-fe5db46ed85a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "exploited", "source": "https://t.me/ctinow/257311", "content": "Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure\nhttps://ift.tt/OcElxV6", "creation_timestamp": "2026-09-24T08:24:13.000000Z"}, {"uuid": "a6764e13-1869-40a7-8c4c-bee6d1d23b69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://thehackernews.com/2026/09/attackers-exploit-wordpress-cve-2026.html", "content": "Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure.\n\nThe vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE).\n\n\"An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file", "creation_timestamp": "2026-09-24T03:36:18.000000Z"}, {"uuid": "9db02cf4-0a7c-43e5-9fb6-2158af9cc77f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.securityweek.com/critical-wordpress-vulnerability-exploited-immediately-after-disclosure/", "content": "Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.\n\nThe post Critical WordPress Vulnerability Exploited Immediately After Disclosure appeared first on SecurityWeek.", "creation_timestamp": "2026-09-24T05:12:26.000000Z"}, {"uuid": "b2442752-4c05-48e1-94b4-316154b55ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mways6k4n32m", "content": "\ud83d\udd12 Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure\n\nThreat actors have begun to actively exploit a critical security flaw in WordPress within hours of public di...\n\nhttps://tinyurl.com/26l9pzza #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-09-24T10:01:51.580243Z"}, {"uuid": "c558fa42-fc44-4241-807d-6a8a72241b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheid-in-wordpress-wordt-actief-misbruikt-update-nu", "content": "", "creation_timestamp": "2026-09-24T03:30:00.000000Z"}, {"uuid": "aa10133f-0ce6-4073-8f9a-255fb2a3a397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/happenstuff.com/post/3mwaztqjwc22f", "content": "Article:\nThreat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure.\n\nThe vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE).", "creation_timestamp": "2026-09-24T10:18:18.450913Z"}, {"uuid": "8c4317b9-4e90-449d-b287-aec59235cac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/igalog.bsky.social/post/3mwb3aze62e2d", "content": "WordPress 7.1.2 \u3067\u76f4\u3063\u305f\u8106\u5f31\u6027 CVE-2026-87902 \u3068\u3001\u3044\u307e\u78ba\u8a8d\u3059\u308b\u3053\u3068\nhttps://raplsworks.com/wordpress-7-1-2-security-release/\n\n\u30c8\u30ea\u30a2\u30fc\u30b8\u76ee\u7684\u3082\u3042\u308a\u3001\u5bfe\u8c61\u5224\u5b9a\u306e\u65b9\u6cd5\u304c\u307e\u3068\u307e\u3063\u3066\u308b\u306e\u52a9\u304b\u308b", "creation_timestamp": "2026-09-24T10:45:57.451087Z"}, {"uuid": "aa680af5-1a0f-4f58-8f9e-bdaa465d10a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mwb5gd44ug25", "content": "WordPress 7.1.1-CVE-2026-87902 exploit", "creation_timestamp": "2026-09-24T11:24:42.538027Z"}, {"uuid": "530cad2e-e042-45e4-abe6-43dc891486dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mwb5yk4rqh2x", "content": "Threat actors are actively exploiting a critical WordPress vulnerability, CVE-2026-87902, just hours after its public disclosure. The unauthenticated remote code [\u2026]", "creation_timestamp": "2026-09-24T11:34:54.594935Z"}, {"uuid": "91f1b6ea-cc42-46c2-9dd1-f216c86ca3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/targetsocialmedia.bsky.social/post/3mwb65ogluf2g", "content": "WordPress CVE-2026-87902: Probing and PHP File-Write Attempts Observed on Patch Day", "creation_timestamp": "2026-09-24T11:37:45.920698Z"}, {"uuid": "8eb973dc-41be-469b-980b-da06b1bbf14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mwb6deofqh2f", "content": "CVE-2026-87902 is waking up every WordPress admin who hasn't gone to bed yet. It's a path traversal flaw. That means it goes straight to remote code execution via pearcmd.php.\n\n#vulnerability #infosec", "creation_timestamp": "2026-09-24T11:40:57.079057Z"}, {"uuid": "df342ec5-0c19-46d4-9131-86f75a14b2ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "exploited", "source": "https://t.me/information_security_channel/55970", "content": "Critical WordPress Vulnerability Exploited Immediately After Disclosure\nhttps://www.securityweek.com/critical-wordpress-vulnerability-exploited-immediately-after-disclosure/\n\nTracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.\nThe post Critical WordPress Vulnerability Exploited Immediately After Disclosure (https://www.securityweek.com/critical-wordpress-vulnerability-exploited-immediately-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-24T10:30:54.000000Z"}, {"uuid": "a0452655-699f-4753-a394-23cf82ea43f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3mwb7t3a2bg2v", "content": "\ud83d\uddb2\ufe0f #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia\n\nAttackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure\n\nLeer M\u00e1s / Read More...", "creation_timestamp": "2026-09-24T12:07:37.958001Z"}, {"uuid": "fe2cc0d6-2b32-4063-bfdf-40e126a9b930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3mwbbfw4ljs23", "content": "Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure\nthehackernews.com/2026/09/atta...", "creation_timestamp": "2026-09-24T12:36:06.086569Z"}, {"uuid": "c0ffb515-fe88-49da-83ef-14669cd4d3ab", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d94335f8-a75d-4714-b625-7e5c5418779a", "content": "", "creation_timestamp": "2026-09-24T13:00:44.237763Z"}, {"uuid": "d8cc49f9-8aad-4c15-aa11-220a6ff90e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mwbfdtdj5h2j", "content": "Attackers are exploiting WordPress CVE-2026-87902 to include pearcmd.php and write PHP files when specific theme and server conditions are met.", "creation_timestamp": "2026-09-24T13:46:29.168723Z"}, {"uuid": "570c3f34-1b40-4933-9977-bc0f76f182e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/wpsecurityninja.bsky.social/post/3mwbhgv4okc23", "content": "Yesterday: patch and probes.\nToday: attackers writing PHP via pearcmd on unpatched WordPress (CVE-2026-87902).\n\nUpdate past 7.1.1 to 7.1.2 (or your branch backport), then check logs and /tmp|/var/tmp for names like wp-pear-rce-flag.php, poc87902.php, luci_.php, zeta_.php.", "creation_timestamp": "2026-09-24T14:23:58.875900Z"}, {"uuid": "477687e9-0a38-4014-91b0-c24b2270422a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/it-administrator.de/post/3mwbhpohsbc2u", "content": "Die kritische WordPress-L\u00fccke CVE-2026-87902 zeigt, wie schnell aus einem Sicherheitsupdate ein Wettlauf gegen die Zeit wird. Was hinter der Schwachstelle steckt, wie die Angriffe in drei Stufen ablaufen und warum das Update jetzt dringend ist.\n\nwww.it-administrator.de/wordpress-sc...", "creation_timestamp": "2026-09-24T14:28:57.840016Z"}, {"uuid": "28bda4e0-4dcb-44ec-83e0-eb4148fee26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwbimvgxjs2v", "content": "WordPress core CVE-2026-87902: path traversal \u2192 unauthenticated RCE, CVSS 8.1. active exploitation confirmed\u2026 https://0daynews.com/articles/2026-09-24-wordpress-core-cve-2026-87902-path-traversal-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3471", "creation_timestamp": "2026-09-24T14:45:14.656263Z"}, {"uuid": "6ce3b881-6c42-4dca-8532-c4e35daedc19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mwbjvayrje2r", "content": "WordPress fixed CVE-2026-87902 on Sept 22, a CVSS 9.2 unauthenticated RCE in page-template resolution. Patchstack and Previdian say exploitation began within hours, with 68 attempts logged by the next day. Patched versions: 7.1.2, 7.0.6, 6.9.9, 6.8.10.", "creation_timestamp": "2026-09-24T15:07:48.648761Z"}]}