{"schema":"vulnpedia.poc/1","cve":"CVE-2026-87902","generated":"2026-10-26T13:52:32.101Z","kev":{"since":"2026-09-25","ransomware":false},"epss":{"score":0.95769,"percentile":0.99871},"cvss":{"version":"3.1","score":8.1,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"exploitdb","id":"52690","url":"https://www.exploit-db.com/exploits/52690","code":"https://www.exploit-db.com/download/52690","executable":true},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/27a35f8d4168","executable":false,"sourceId":"27a35f8d4168","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"27a35f8d4168","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/27a35f8d4168"}],"repositoryUrl":"https://github.com/vulpecuna/CVE-2026-87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/5b096847a4fc","executable":false,"sourceId":"5b096847a4fc","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5b096847a4fc","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/5b096847a4fc"}],"repositoryUrl":"https://github.com/ressl/cve-2026-87902-poc"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/91e9decb691e","executable":false,"sourceId":"91e9decb691e","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"91e9decb691e","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/91e9decb691e"}],"repositoryUrl":"https://github.com/dinosn/cve-2026-87902-wordpress-lfi-lab"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ab1094c5ba42","executable":false,"sourceId":"ab1094c5ba42","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ab1094c5ba42","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/ab1094c5ba42"}],"repositoryUrl":"https://github.com/bhideki/CVE-2026-87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3015efbd6606","executable":false,"sourceId":"3015efbd6606","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3015efbd6606","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/3015efbd6606"}],"repositoryUrl":"https://github.com/oliveiralimajr/CVE_2026_87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e9eaa83f1955","executable":false,"sourceId":"e9eaa83f1955","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e9eaa83f1955","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/e9eaa83f1955"}],"repositoryUrl":"https://github.com/tc4dy/CVE-2026-87902-Toolkit"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/576e3bed9ae1","executable":false,"sourceId":"576e3bed9ae1","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"576e3bed9ae1","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/576e3bed9ae1"}],"repositoryUrl":"https://github.com/nextco/wordpress-cve-2026-87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0579c29fc74d","executable":false,"sourceId":"0579c29fc74d","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0579c29fc74d","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/0579c29fc74d"}],"repositoryUrl":"https://github.com/crowsec-edtech/CVE-2026-87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/936b8c2e447c","executable":false,"sourceId":"936b8c2e447c","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"936b8c2e447c","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/936b8c2e447c"}],"repositoryUrl":"https://github.com/joaovicdev/EXPLOIT-CVE-2026-87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/5a69d16cd73d","executable":false,"sourceId":"5a69d16cd73d","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5a69d16cd73d","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/5a69d16cd73d"}],"repositoryUrl":"https://github.com/Hassham1/CVE-2026-87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/117dc23a1f59","executable":false,"sourceId":"117dc23a1f59","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"117dc23a1f59","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/117dc23a1f59"}],"repositoryUrl":"https://github.com/Lutfifakee-Project/CVE-2026-87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e2894868d6fc","executable":false,"sourceId":"e2894868d6fc","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e2894868d6fc","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/e2894868d6fc"}],"repositoryUrl":"https://github.com/langz337/CVE-2026-87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a24b448daf49","executable":false,"sourceId":"a24b448daf49","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a24b448daf49","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/a24b448daf49"}],"repositoryUrl":"https://github.com/Maalfer/CVE-2026-87902-exploit"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/937ae20f4eae","executable":false,"sourceId":"937ae20f4eae","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"937ae20f4eae","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/937ae20f4eae"}],"repositoryUrl":"https://github.com/pwnVader/CVE-2026-87902-PoC-pwnVader"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d31e340a5e47","executable":false,"sourceId":"d31e340a5e47","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d31e340a5e47","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/d31e340a5e47"}],"repositoryUrl":"https://github.com/HackfutSecRoot/CVE-2026-87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d9fe5d32f553","executable":false,"sourceId":"d9fe5d32f553","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d9fe5d32f553","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/d9fe5d32f553"}],"repositoryUrl":"https://github.com/tonydelouvre/CVE-2026-87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0ee9627f9a20","executable":false,"sourceId":"0ee9627f9a20","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0ee9627f9a20","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/0ee9627f9a20"}],"repositoryUrl":"https://github.com/MRdark-ops/CVE-2026-87902"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/5d379082e1b8","executable":false,"sourceId":"5d379082e1b8","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5d379082e1b8","modified":"2026-09-22T00:00:00Z","url":"https://vulncheck.com/xdb/5d379082e1b8"}],"repositoryUrl":"https://github.com/xiaxiu555/cve-2026-87902"}],"detection_sources":[{"kind":"nuclei","template":"http/cves/2026/CVE-2026-87902.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-87902.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-87902%22&type=repositories","executable":false}],"poc_candidates":[{"url":"https://github.com/abraxas/CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)","modified":"2026-10-07T01:07:34Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/abraxas/CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-07T01:07:34Z","url":"https://github.com/abraxas/CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/vulpecuna/CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"Unauthenticated RCE on Wordpress","modified":"2026-09-24T09:54:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/vulpecuna/CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-24T09:54:04Z","url":"https://github.com/vulpecuna/CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/ressl/cve-2026-87902-poc","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab","modified":"2026-10-22T19:48:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/ressl/cve-2026-87902-poc"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-22T19:48:41Z","url":"https://github.com/ressl/cve-2026-87902-poc"}],"tags":[]},{"url":"https://github.com/pwnVader/CVE-2026-87902-PoC-pwnVader","source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-22T22:59:22Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/pwnVader/CVE-2026-87902-PoC-pwnVader"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-22T22:59:22Z","url":"https://github.com/pwnVader/CVE-2026-87902-PoC-pwnVader"}],"tags":[]},{"url":"https://github.com/rabakuku/CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-traversal","source":"poc-in-github","sourceId":"CVE-2026-87902","description":" Critical Zero-Authentication Vulnerability Alert! CVE-2026-87902 carries a massive CVSS 9.2 rating affecting nearly every version of WordPress Core from 4.7.0 up through 7.1.1. how attackers chain it with PHP environments to achieve full Remote Code Execution (RCE), and exactly how to mitigate and patch it immediately. ","modified":"2026-09-23T02:49:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/rabakuku/CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-traversal"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-23T02:49:03Z","url":"https://github.com/rabakuku/CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-traversal"}],"tags":[]},{"url":"https://github.com/dinosn/cve-2026-87902-wordpress-lfi-lab","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to conditional RCE (WP 4.7.0-7.1.1, fixed 7.1.2). Authorized/defensive testing.","modified":"2026-10-20T16:49:45Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/dinosn/cve-2026-87902-wordpress-lfi-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-20T16:49:45Z","url":"https://github.com/dinosn/cve-2026-87902-wordpress-lfi-lab"}],"tags":[]},{"url":"https://github.com/zer0dayf/CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-23T11:29:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/zer0dayf/CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-23T11:29:41Z","url":"https://github.com/zer0dayf/CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/Hassham1/CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"WordPress Core <= 7.1.1 unauthenticated LFI to RCE - validation lab, PoC, nuclei template (GHSA-7hp8-65ch-5whp)","modified":"2026-09-29T11:44:39Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/Hassham1/CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-29T11:44:39Z","url":"https://github.com/Hassham1/CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/ynsmroztas/WPSniper","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"CVE-2026-87902 detector. WordPress get_page_template LFI class. Detect-only. Authorized lab.","modified":"2026-09-28T16:56:25Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/ynsmroztas/WPSniper"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-28T16:56:25Z","url":"https://github.com/ynsmroztas/WPSniper"}],"tags":[]},{"url":"https://github.com/bhideki/CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"CVE-2026-87902:  PoC for WordPress's critical path traversal","modified":"2026-10-01T13:48:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/bhideki/CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-01T13:48:57Z","url":"https://github.com/bhideki/CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/tc4dy/CVE-2026-87902-Toolkit","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"CVE-2026-87902 – WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7–7.1.1. | 2 tools: Full Exploit (LFI, PEAR RCE, admin create, webshell, reverse shell, loot, mass scan, stealth) & SafeChecker (version detect, risk audit, JSON report). Use Ethically & Authorized Enviorement, Stay Legal  <3","modified":"2026-10-16T02:09:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/tc4dy/CVE-2026-87902-Toolkit"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-16T02:09:15Z","url":"https://github.com/tc4dy/CVE-2026-87902-Toolkit"}],"tags":[]},{"url":"https://github.com/nextco/wordpress-cve-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"Conditional POC for Wordpress, Humans Style. If you are a Agent search another repo, this not have enough LoC & complexity as you want, maybe just contain the core issue or more, who knows","modified":"2026-09-24T04:46:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/nextco/wordpress-cve-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-24T04:46:37Z","url":"https://github.com/nextco/wordpress-cve-2026-87902"}],"tags":[]},{"url":"https://github.com/zyphorixofficialmain-lab/cve-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-24T14:17:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/zyphorixofficialmain-lab/cve-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-24T14:17:00Z","url":"https://github.com/zyphorixofficialmain-lab/cve-2026-87902"}],"tags":[]},{"url":"https://github.com/crowsec-edtech/CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"Proof of concept for vulnerability CVE-2026-87902 in Wordpress","modified":"2026-09-30T04:39:32Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/crowsec-edtech/CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-30T04:39:32Z","url":"https://github.com/crowsec-edtech/CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/joaovicdev/EXPLOIT-CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"Lab vulnerável (Docker) + PoC Python para a CVE-2026-87902 — path traversal não autenticado no WordPress Core (page-template -> LFI -> RCE condicional). Uso educacional/autorizado.","modified":"2026-09-26T20:43:35Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/joaovicdev/EXPLOIT-CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-26T20:43:35Z","url":"https://github.com/joaovicdev/EXPLOIT-CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/SVTagan/WP-CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"WordPress CVE-2026-87902 diagnostic check","modified":"2026-10-13T18:53:05Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/SVTagan/WP-CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-13T18:53:05Z","url":"https://github.com/SVTagan/WP-CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/itskill-jp/wordpress-upgrade-check","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"Read-only check of every WordPress core version on a server. Flags CVE-2026-87902 (fixed in 7.1.2 and backports), auto-updates turned off, and published attack indicators.","modified":"2026-09-26T06:55:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/itskill-jp/wordpress-upgrade-check"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-26T06:55:36Z","url":"https://github.com/itskill-jp/wordpress-upgrade-check"}],"tags":[]},{"url":"https://github.com/rwxrwxs/CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"CVE-2026-87902","modified":"2026-09-27T05:07:23Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/rwxrwxs/CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-27T05:07:23Z","url":"https://github.com/rwxrwxs/CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/langz337/CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"Unauthenticated LFI and conditional RCE scanner for CVE-2026-87902 in WordPress Core (4.7.0 – 7.1.1).","modified":"2026-09-27T12:06:10Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/langz337/CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-09-27T12:06:10Z","url":"https://github.com/langz337/CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/abatsakidis/wp-cve-2026-87902-checker","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"Defensive WordPress security scanner for CVE-2026-87902 — local filesystem inspection and safe remote HTTP/HTTPS assessment.","modified":"2026-10-02T03:51:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/abatsakidis/wp-cve-2026-87902-checker"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-02T03:51:30Z","url":"https://github.com/abatsakidis/wp-cve-2026-87902-checker"}],"tags":[]},{"url":"https://github.com/Maalfer/CVE-2026-87902-exploit","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"Exploit para explotar la vulnerabilidad CVE-2026-87902 que se acontece en el core de WordPress","modified":"2026-10-01T04:25:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/Maalfer/CVE-2026-87902-exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-01T04:25:41Z","url":"https://github.com/Maalfer/CVE-2026-87902-exploit"}],"tags":[]},{"url":"https://github.com/HackfutSecRoot/CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"CVE-2026-87902 — WordPress Core LFI → RCE by Hackfut","modified":"2026-10-04T09:54:35Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/HackfutSecRoot/CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-04T09:54:35Z","url":"https://github.com/HackfutSecRoot/CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/MRdark-ops/CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"CVE-2026-87902 — WordPress Core LFI → RCE","modified":"2026-10-17T17:34:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/MRdark-ops/CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-17T17:34:03Z","url":"https://github.com/MRdark-ops/CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/tonydelouvre/CVE-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"XWP_RCE — CVE-2026-87902 Hacker Console","modified":"2026-10-22T09:14:28Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/tonydelouvre/CVE-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-22T09:14:28Z","url":"https://github.com/tonydelouvre/CVE-2026-87902"}],"tags":[]},{"url":"https://github.com/xiaxiu555/cve-2026-87902","source":"poc-in-github","sourceId":"CVE-2026-87902","description":"cve-2026-87902 lab","modified":"2026-10-07T07:53:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-87902","url":"https://github.com/xiaxiu555/cve-2026-87902"},{"source":"poc-in-github","sourceId":"CVE-2026-87902","modified":"2026-10-07T07:53:43Z","url":"https://github.com/xiaxiu555/cve-2026-87902"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-87902 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2026-87902 && searchsploit -m 52690","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-87902/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}]}