Hackers start exploiting critical WordPress flaw for code execution

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-23 18:31 UTC
  • Importiert: 2026-09-25 11:03 UTC
  • CVSS: 8.1
  • Quelle-ID: bleeping_c
  • uid_hash: 23cf356e3b2226e6aa45640b577b377c7288e000dd921b33bc66a949369f44a2

Inhalt

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-87902

HIGH

8.1

HIGH

8.1

2026-09-22

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
BleepingComputer

bleeping_c

security_news - de https://www.bleepingcomputer.com/feed/