Tag: cve

← All posts

1. CVE-2026-87902: Critical WordPress file inclusion and conditional RCE

   Published 2026-09-22 · 9 min read

   An unauthenticated page-template traversal in WordPress Core can lead to local PHP file inclusion and conditional RCE. The root cause, deployment prerequisites, laboratory evidence and disclosure timeline behind my finding.

   • #security
   • #wordpress
   • #vulnerability-research
   • #cve

Atom feed