CRIME & JUSTICEQUIET
23 days ago
Hackers start exploiting critical WordPress flaw for code execution
SIGNALSMONITORSECURITY
What's happening
SignalsMonitor is following this as a crime & justice story. BleepingComputer is the outlet attached so far. The first report grouped here was at 23 Sept 2026, 18:31 UTC. The headline in use is “Hackers start exploiting critical WordPress flaw for code execution”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...
BleepingComputerRead at BleepingComputer
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
Hackers start exploiting critical WordPress flaw for code execution
Reported by 1 outlet
- BleepingComputer