Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]
Hackers start exploiting critical WordPress flaw for code execution
Résumé + lien vers la source. Sans paywall, sans tracking.