Back to Fastnexa
Under attack?
CyberBrief
Subscribe
Fastnexa

WordPress security advisory (AV26-952)

HighCVSS 8.1Canadian Centre for Cyber Security · Canadian Centre for Cyber Security·

At a glance

Severity
HighCVSS 8.1
Used in attacks
Yes, 1 of 1 flaw named
Flaws named
CVE-2026-87902
Vendors and products
WordPress
Reported by
1 outlet

As of September 22, 2026, WordPress is affected by a vulnerability in the following product:

  • WordPress
    • Prior to 7.1.2

Open-source reporting indicates that CVE-2026-87902 is being exploited in the wild.

Update 1

On September 25, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-87902 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

Originally published by Canadian Centre for Cyber Security. © Canadian Centre for Cyber Security. Written by Canadian Centre for Cyber Security.

Read at cyber.gc.ca ↗Official Source

Vulnerabilities referenced

  • CVE-2026-879028.1High

    WordPress Core

    WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.

    Used in attacks

    Added to CISA's list 2026-09-25 · Patch or advisory available

    Full record →

Fastnexa security experts

This story involves a flaw attackers are already using. Are you exposed?

A Fastnexa penetration tester can check whether CVE-2026-87902 or anything like it can be used against your websites, apps and network.

Book a 30-min callWhatsApp us

Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →

Coverage

One outlet has carried this so far.

  1. Canadian Centre for Cyber Security ↗Official SourceFirst reported

    2026-09-23 15:35 UTC

Related stories