CVE-2026-87902

Critical WordPress Core Template Traversal Flaw Weaponized for Remote Code Execution CVE-2026-87902

WordPress releases emergency update 7.1.2 to patch critical path traversal flaw CVE-2026-87902 in get_page_template() weaponized in active web attacks.