Tag: CVE-2026-87902

WordPress core patch closes a path traversal that can run code

WordPress 7.1.2 closes a path traversal in get_page_template() that needs no account and can end in code execution on some…