{"id":"EUVD-2026-84555","enisaUuid":"3d97a61b-020a-30c3-8389-dc52328288c3","description":"An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE.","datePublished":"Sep 22, 2026, 4:44:15 PM","dateUpdated":"Sep 26, 2026, 3:55:51 AM","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp\n","aliases":"CVE-2026-87902\n","assigner":"hackerone","epss":95.77,"exploitedSince":"Sep 23, 2026, 12:00:00 AM","enisaIdProduct":[{"id":"aac68054-54f9-30ef-8f1a-6b84fce077af","product":{"name":"WordPress","vendor":{"name":"WordPress Foundation"}},"product_version":"0 \u003c7.1.2"}],"enisaIdVendor":[{"id":"a504e073-cd98-3c5e-98db-1fcd85bc81bd","vendor":{"name":"WordPress"}}],"enisaIdVulnerability":[{"id":"1077001a-8e92-3ec3-9f06-c23ea0109b03","vulnerability":{"id":"CVE-2026-87902","description":"An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE.","datePublished":"Sep 22, 2026, 4:44:15 PM","dateUpdated":"Sep 26, 2026, 3:55:51 AM","status":"PUBLISHED","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp\n","enisa_id":"EUVD-2026-84555\n","assigner":"hackerone","epss":95.77,"dataProcessed":"Nov 5, 2026, 7:14:48 AM","exploitedSince":"Sep 23, 2026, 12:00:00 AM","vulnerabilityProduct":[{"id":"1b4b06c8-a0e7-3382-a819-374147596190","product":{"name":"WordPress","vendor":{"name":"WordPress Foundation"}},"product_version":"0 \u003c7.1.2"}],"vulnerabilityVendor":[{"id":"ca884758-720c-36e7-8bd7-92f428ba6ca5","vendor":{"name":"WordPress"}}]}}],"enisaIdAdvisory":[{"id":"fcd4191d-1699-32e1-ba4c-e832b71f34a2","advisory":{"id":"NCSC-2026-0389","description":" Kwetsbaarheid verholpen in WordPress","datePublished":"Sep 23, 2026, 11:47:46 AM","dateUpdated":"Sep 24, 2026, 9:14:33 AM","baseScore":0.0,"references":"","aliases":"CVE-2026-87902\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"984c7816-881b-3a58-a96a-1f4657e13d12","product":{"name":"WordPress","vendor":{"name":"WordPress Foundation"}}}]}}]}