CISA Adds Actively Exploited WordPress Core Vulnerability to KEV Catalog
Summary
CISA added CVE-2026-87902, a WordPress Core remote file inclusion vulnerability, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation and urged organizations to prioritize remediation.
Key points
- CISA added CVE-2026-87902, a WordPress Core remote file inclusion vulnerability, to its KEV Catalog.
- The addition is based on evidence that the vulnerability is being actively exploited.
- CISA says KEV-listed vulnerabilities pose significant risks and encourages organizations to prioritize remediation using risk-based vulnerability management.
- Federal Civilian Executive Branch agencies must follow BOD 26-04, including prioritizing remediation of specified high-risk KEV vulnerabilities and checking for compromise before patching.
Article Details
- Vulnerability Types
- Remote file inclusion
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- unknown