Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.

The post Critical WordPress Vulnerability Exploited Immediately After Disclosure appeared first on SecurityWeek.

https://www.securityweek.com/critical-wordpress-vulnerability-exploited-immediately-after-disclosure/