BreakingWordPress Core flaw CVE-2026-87902 is being actively exploited, CISA warns
CISA added the WordPress Core vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.