CVE-2026-87902: Hackers deployed PHP webshells on WordPress servers within 48 hours of the September 22 security patch, with attack traffic surging tenfold as more than 350,000 sites remain unpatched.
Hackers are breaking into websites that run vulnerable versions of the popular blogging software WordPress, according to several cybersecurity firms. One estimate puts the number of vulnerable ...
If you run a site or blog using WordPress, please check the version of your installation.A critical vulnerability, "CVE-2026-87902," has been discovered in the WordPress core, and a patched version, ...
WordPress 7.1.2 security release fixes a critical flaw (CVE-2026-87902) letting unauthenticated attackers load local PHP files and run code.
Hackers are actively exploiting CVE-2026-87902, a critical WordPress flaw that can lead to remote code execution. Here’s what admins should do.
The problem brought to our consultation desk this time was: "I heard that the PHP running behind my website will reach its ...
WordPress 7.0, previously scheduled for an April 9th release, will be delayed in order to stabilize the Real-Time Collaboration feature and assure that the release, a major milestone, will “target ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results