Summary

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed.

AI summaries can be wrong sometimes—always verify important details using the source article.