CVE-2026-87902: Critical WordPress file inclusion and conditional RCE
An unauthenticated page-template traversal in WordPress Core can lead to local PHP file inclusion and conditional RCE. The root cause, deployment prerequisites, laboratory evidence and disclosure timeline behind my finding.