Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.
The post Critical WordPress Vulnerability Exploited Immediately After Disclosure appeared first on SecurityWeek.