# Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

> **Newsylist Open Intelligence Dossier** · First detected: 2026-09-24 15:29 UTC · Category: Technology · Sources: 6 · Current Velocity: 3.67

## Key People, Organizations & Locations
Hours, WordPress, Disclosure, Within, Attackers, Exploit, CVE-2026-87902

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| Field Effect | WordPress 7.1.1 fixes two paths to shell | 2026-09-24 05:36 | [Source Link](https://news.google.com/rss/articles/CBMidEFVX3lxTE42a0NoaVdVR0JRcDBxZm03NTUwdkFYckJNT0VtajhIa1dnSGo1cm1FcnVqYng4a2FMa003RzQ0dTdKbUpjU1pPSFRmWDkwS2htZFB6NWNVSnhCc0c5aEFHSXRDd2RnQVZ5UGs2THpsR1lpNFBT?oc=5) |
| csoonline.com | WordPress patches a critical severity security vulnerability | 2026-09-24 05:36 | [Source Link](https://news.google.com/rss/articles/CBMiqwFBVV95cUxOWXFzaklzNVFrVXVXVFlMUk8ySDdybTc1VkZ1YVlnbE8zeWY1clN5SDVWSmNBWjlPNHhhOTRwaXk1UG1jZG5leHdXRG1oelRyUVoyVEo1YjFYWlk3RnNGa0l0dnpMbGdqX29BSTFEZGpaZEtYNGRLQ0xtT21VWXBmakY1QTRMX09WMTdseWRwR0lLUTJPckM0aW9aRUxyNkxiTm0yQ1JtMjdudEU?oc=5) |
| BleepingComputer | WordPress Click2Shell flaw lets hackers execute PHP on the server | 2026-09-24 05:36 | [Source Link](https://news.google.com/rss/articles/CBMiswFBVV95cUxPRmxVeGJNbzJ4Sk9lamFLdlk0LTB4ekxTeFNvbmZvVjJzdWVpbUN5ZEZSSXRZX0p3b1o0LU5jaUVqVUdiNUFpdFVKaWx4M29ablZMRVVVdXRIMGY0SUxyOHhkY3VlOV9yLXRhcmFnTERiZlAzNUNnU1ptNmgxOEEwWl9aYTFSY1lTQkVkM0RTZkd2Yl9zbDQ3aldjNnZCMnNKWjhmakxGbUJ2a3dvRk05cEtIONIBuAFBVV95cUxPZEphYi02UGhtd0RlZWZlc0NyVXIxTklGc2tuQTNDZWZoN29EV3N5QUN0T3hfdHk5MWdLMHR0NFpuUTN1RF9NYlZDQTY5V2pEUnpIeFJYbXBnWnQ3WHRlYWJQWkluckJmbFBWX3JPb3VZNC01UFlKWTQ4a3NHVU9kbzh3Y2pTZjFZaVZ4VzNCMEt0MmV2Z1FVaVBBS3VhVTJ) |
| heise online | Security updates: Click2Shell vulnerability to compromise WordPress websites | 2026-09-24 05:36 | [Source Link](https://news.google.com/rss/articles/CBMiugFBVV95cUxQdnhJczZnMTdsVUNNYmlESzdnMEpiellGYjZjZDZpVl9hSXY0ZGd4U3B2b2lNZzFkVWlOVVRZY0xGSDdqbHNrcXE5UHRDZUtHWE5zRXlFUVpsSzNZaVdrZmFVNTZ4TGZJeXN4eHYzMmlRS05iUU1SOU5OM281NlRlODMwazhSeGVHWU5ubUQxR05VTHV1aVdocnFDZEVLM1d2OFVJUWtMVjh3dklaVnhZdXR1Qk53YmxEbUE?oc=5) |
| SecurityWeek | Critical WordPress Vulnerability Exploited Immediately After Disclosure | 2026-09-24 05:36 | [Source Link](https://news.google.com/rss/articles/CBMiowFBVV95cUxQdHYwWlB0OGx2TnM0anMyZEJNWTJGLUpWbDV0alhVWncyQXZaLWk3WUVnQ2xiWWlVVkVlX3dGazhKb0V5cTByRXJfek9ZcUNfRkZ2NmhNODZFelozN0Jua19hdktHNWhWUG82WWdSaHVfaHRmMDhmNjllNUowOFVHMTVLWjVoYUFrRUFpRHNSSDJkRzZUY0ZBM0VacU4tSXlLR2RJ0gGoAUFVX3lxTE1GRWFqSGpJR3hkS285REVKUTNnbjRfZ3dzQXR1LXpmS0JmTldtQXg2Uk85dGlReTlNNnJCUS1DR2dzdG5rWGVpb0lvQjZqTDczUFc2bDd5ZzR5RDMwMDVmbjBRUTZQOUpFdUYtbEd0LUE0RkFlMFpudzZ5VjdLcmV6LXVvaTFDZzlkQkQtZVIwV3hHQXVhY2lzR1RERDRtbWkyenBwYXROTg?oc=5) |
| TechRadar | Hackers are targeting a critical WordPress flaw, so be on your guard | 2026-09-24 05:36 | [Source Link](https://news.google.com/rss/articles/CBMiqgFBVV95cUxQUjM4c1VkczFIZGFjS3hNdU82ZXhyWjJoWFJ5V3VvT0w4OGM0RTFnZ2NBQjdFSVN3TDhfQzZhSndQem9YbGNyNFVIV1RxRF84RmhHdm5BbE5XWTYwclFpSjJsV0NYaF9mVllmdFhxQkY5c0Z6c2Flby1MMnhVVDB5ZFhfZXpYaUhFVlNYMHY4NmVyMG50ZFJhRGNjWUhocWM0b2pnSUFpekp3dw?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-09-24/attackers-exploit-wordpress-cve-2026-87902-within-hours-of-disclosure*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*