Attackers Exploit Word Press CVE-2026-87902 Within Hours of Disclosure
Summary: Attackers began exploiting CVE-2026-87902, a WordPress flaw with a CVSS score of 9.2 that allows an unauthenticated attacker to achieve remote code execution, within hours of public disclosure. Previdian recorded 68 exploitation attempts starting September 23, 2026, with the first effort logged September 22 at 11:49 a.m. UTC, the same day patches shipped, and CISA added the flaw to its KEV catalog on September 25, 2026, with a September 28, 2026 deadline for FCEB agencies.
What you should know: The first exploitation attempt landed the same day patches shipped, and CISA gave federal agencies only three days to apply fixes - a window that assumes your WordPress inventory is already known and patchable.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-87902
- Related
- CVE-2026-87902: Word Press Core Remote File Inclusion Vulnerability Known Exploited Vulnerabilities · Sep 25, 2026