Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
Threat actors actively exploit critical WordPress CVE-2026-87902 (RCE) shortly after its disclosure, with confirmed exploitation attempts.
90
Malware
PHP upload script
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 24, 2026
- Last mentionedSep 24, 2026
Timeline
1 articles · newest firstRelated CVEs
by mentions- CVE-2026-8790296%8.1Unauthenticated Local File Inclusion to RCE in WordPress Core (fixed in 7.1.2)
Appears with
- WordPressproduct · 1
- Previdianthreat actor · 1
- Patchstackorganization · 1
- Previdianorganization · 1
- WordPressai model · 1
- Patchstackvendor · 1
- Previdianvendor · 1
- Patchstackthreat actor · 1
- WordPressvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.