Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
CVE-2026-87902: Critical WordPress Core Flaw Enables Unauthenticated RCE Under Certain Conditions
Excerpt
WordPress has released an emergency security update addressing a critical vulnerability in its Core software that can allow an unauthenticated attacker to load arbitrary local PHP files and, under specific server and theme conditions, achieve remote code execution. Tracked as CVE-2026-87902, the vulnerability affects WordPress releases from version 4.7.0 through 7.1.1 and carries a CVSS 4.0 score of 9.2. The flaw resides in WordPress page-template resolution. An attacker can…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-87902 | High | Score 71/100 | First seen |
| CVE | CVE-2026-93616 | High | Score 80/100 | First seen |
IOC Relationship Graph
Building graph…