Vendor

WordPress

39 known vulnerabilities.

Products

WordPress 18 wordpress-develop 17 Buddypress 1 Social-Share-Buttons 1 Requests 1 WordPress-Coding-Standards 1 Core 0

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2026-87902 Exploited Public exploit EPSS 96%

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.p…

WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu

Sep 22, 2026
KEV Sep 25, 2026