Sep 252026 Attackers Exploit WordPress CVE-2026–87902 Within Hours of Disclosure Attackers are exploiting WordPress CVE-2026–87902 to include pearcmd.php and write PHP files when specific theme and server conditions are met.