Update to 7.1.2, or the patched release on your branch. Check for encoded pagename hits and PHP under /tmp.
A plugin does not replace that update.
wordpress.org/news/2026/09...
Update to 7.1.2, or the patched release on your branch. Check for encoded pagename hits and PHP under /tmp.
A plugin does not replace that update.
wordpress.org/news/2026/09...
これはClick2Shellとは別の問題で、未ログインの第三者が細工したpagenameを送るとテーマの構造など条件次第でテーマ外のPHPファイルを読み込ませられます。
7.1系は7.1.2、旧系列は対応する修正版を確認してください。
https://chunlog.jp/wordpress-7-1-2-cve-2026-87902/?utm_source=bluesky&utm_medium=social&utm_campaign=post
#WordPress #セキュリティ
これはClick2Shellとは別の問題で、未ログインの第三者が細工したpagenameを送るとテーマの構造など条件次第でテーマ外のPHPファイルを読み込ませられます。
7.1系は7.1.2、旧系列は対応する修正版を確認してください。
https://chunlog.jp/wordpress-7-1-2-cve-2026-87902/?utm_source=bluesky&utm_medium=social&utm_campaign=post
#WordPress #セキュリティ
1. Update every site still on ≤7.1.1 to 7.1.2 (or the backport for your branch)
2. Review logs for suspicious pagename/page_id probes
3. Check /tmp and /var/tmp for unexpected .php (wp-pear-rce-flag.php, poc87902.php, luci_.php, zeta_.php)
1. Update every site still on ≤7.1.1 to 7.1.2 (or the backport for your branch)
2. Review logs for suspicious pagename/page_id probes
3. Check /tmp and /var/tmp for unexpected .php (wp-pear-rce-flag.php, poc87902.php, luci_.php, zeta_.php)
CVE-2026-87902 is unauth LFI in core template resolution. Patchstack saw probes the same day.
Update to 7.1.2 or your backport. Hunt logs for odd pagename + page_id.
Already patched? Drop a ✅. Agency life? Pass it to your clients.
CVE-2026-87902 is unauth LFI in core template resolution. Patchstack saw probes the same day.
Update to 7.1.2 or your backport. Hunt logs for odd pagename + page_id.
Already patched? Drop a ✅. Agency life? Pass it to your clients.
Activist knowledge(s) and the city: engaged research and its significance for urban history, demà dia 3 de setembre de 8:30 a 12:30 a la sala 3 de l’Institut d’Estudis Catalans, Carrer del Carme, 47 08001 Barcelona.
eauh2026.confnow.eu?pagename=cms...
Activist knowledge(s) and the city: engaged research and its significance for urban history, demà dia 3 de setembre de 8:30 a 12:30 a la sala 3 de l’Institut d’Estudis Catalans, Carrer del Carme, 47 08001 Barcelona.
eauh2026.confnow.eu?pagename=cms...
Could work ~4h/sol at Gusev Crater*, #mars 🔴 https://science.nasa.gov/photojournal/how-warm-is-mars
*🗺️ https://geohack.toolforge.org/geohack.php?pagename=Gusev_(Martian_crater)¶ms=14.5_S_175.4_E_globe:mars_type:landmark
✧ 原神ナタ診断 ✧
#あなたがもしナタにいたら...?
冒険仲間:レザー
待ち合わせスポット:懸崖の里
竜との冒険:ユムカ竜に憑依して空中を移動しよう
シェアして原神SimejiきせかえをGET✊ https://h5.simeji.me/sj-genshin-diagnose?from=ot&pageName=sj-genshin-diagnose&source=sj_twitter&id=6ef395bb-827b-41b9-86de-07e8bde1b4ce&source=sj_twitter&t=1725068678565 #原神xSimeji
✧ 原神ナタ診断 ✧
#あなたがもしナタにいたら...?
冒険仲間:レザー
待ち合わせスポット:懸崖の里
竜との冒険:ユムカ竜に憑依して空中を移動しよう
シェアして原神SimejiきせかえをGET✊ https://h5.simeji.me/sj-genshin-diagnose?from=ot&pageName=sj-genshin-diagnose&source=sj_twitter&id=6ef395bb-827b-41b9-86de-07e8bde1b4ce&source=sj_twitter&t=1725068678565 #原神xSimeji
Check out the openings here, if you apply let me know! If you have questions or would like more details, let me know!
openings.fansided.com?pagename=fan...
Check out the openings here, if you apply let me know! If you have questions or would like more details, let me know!
openings.fansided.com?pagename=fan...
Live stats and brackets can be found here: https://www.trackwrestling.com/opentournaments/MainFrame.jsp?newSession=false&TIM=1763914339846&pageName=%2Fopentournaments%2FTournamentHub.jsp&twSessionId=lzvyncjpxe
Visit Flo Wrestling for live video.
#GoBeavs
Live stats and brackets can be found here: https://www.trackwrestling.com/opentournaments/MainFrame.jsp?newSession=false&TIM=1763914339846&pageName=%2Fopentournaments%2FTournamentHub.jsp&twSessionId=lzvyncjpxe
Visit Flo Wrestling for live video.
#GoBeavs
https://secure.riverkeeper.org/site/Advocacy?pagename=homepage&page=UserAction&id=666&autologin=true&AddInterest=1065&utm_medium=email&utm_source=emailsubs
2/2
https://secure.riverkeeper.org/site/Advocacy?pagename=homepage&page=UserAction&id=666&autologin=true&AddInterest=1065&utm_medium=email&utm_source=emailsubs
2/2
youtube.com/watch?v=MbVDQK…
youtube.com/watch?v=MbVDQK…
#1 - ResearcHERS, which is a fundraising effort to support cancer research projects led by women.
ResearcHERS: secure.acsevents.org/site/SPageSe...
1/2
#1 - ResearcHERS, which is a fundraising effort to support cancer research projects led by women.
ResearcHERS: secure.acsevents.org/site/SPageSe...
1/2