← Back to Dashboard

CVE-2026-87902

CRITICAL CISA
CVSS Score
N/A
Severity
CRITICAL
Source
CISA
Published
Sep 25, 2026
Description

WordPress — Core: WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.

View Full Details ← Back