Security News Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure TheHackerNews Daniel Bender 24 Sep 2026 Share Attackers are exploiting WordPress CVE-2026-87902 to include pearcmd.php and write PHP files when specific theme and server conditions are met.