WordPress Flaw Under Active Attack: Hackers Target CVE-2026-87902 for Code Execution

Hackers are actively exploiting CVE-2026-87902, a critical WordPress flaw that can lead to remote code execution. Here’s what admins should do.
The Hacker News

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress fixes a critical unauthenticated path traversal flaw that can load local PHP files and, on some servers, enable code execution.
RS Web Solutions

Urgent: Serious Vulnerability in Bricksforge WordPress Plugin Being Exploited, Permitting Remote Code Execution

Serious vulnerability in Bricksforge WordPress plugin is being exploited now, allowing hackers to execute remote code and ...
The Hacker News

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

WordPress 7.1.1 fixes Click2Shell, which can force theme installs from crafted links and was chained with a theme flaw for code execution.

WordPress patches a critical severity security vulnerability

The hole, which allows an unauthenticated attacker to perform remote code execution, is especially dangerous because many enterprises are not aware of all of their WordPress sites.