WordPress security advisory (AV26-952)

Reported by Canadian Centre for Cyber Security

Summary by Cyber Security News23 Sep 2026, 17:35 CEST

About this summary. This is a short, independently written summary of an article first published by Canadian Centre for Cyber Security. Cyber Security News did not report or verify the underlying story. Read the original: https://cyber.gc.ca/en/alerts-advisories/wordpress-security-advisory-av26-952

Serial number: AV26-952 Date: September 23, 2026 As of September 22, 2026, WordPress is affected by a vulnerability in the following product: WordPress Prior to 7.1.2 Open-source reporting indicates that CVE-2026-87902 is being exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

Read the full article at Canadian Centre for Cyber Security →

Source attribution: headline and facts are from Canadian Centre for Cyber Security (cyber.gc.ca). Summary method: excerpt of the source description. See our source attribution policy.