PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Sep 26, 2026

CVE-2026-87902 Scanner

CVE-2026-87902 Scanner - Path Traversal vulnerability in WordPress Core

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
3
Times Used
continuous scan runs
5.9k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
8.1
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
WordPressby WordPress
AFFECTED< 7.1.2→SAFE ✓≥ 7.1.2
Updated Sep 26, 2026View on NVD →
Detail

The WordPress Core platform is a leading content management system used worldwide by individuals, businesses, and organizations to create and manage websites. Its versatility and an extensive array of plugins make it suitable for diverse web development needs, from simple blogs to complex portals. Due to its widespread adoption, ensuring up-to-date security is crucial to mitigate any vulnerabilities that may arise. Users and administrators are encouraged to actively monitor and apply security updates to protect their websites from potential threats. Maintaining the platform involves consistent updates of not just the core WordPress system, but also any added plugins and themes. This scanner is specifically designed to detect vulnerabilities like Path Traversal in WordPress installations to enhance security measures.

The Path Traversal vulnerability in WordPress Core allows unauthenticated attackers to manipulate a web application's file access permissions. This flaw can potentially permit an attacker to access sensitive files and execute arbitrary codes by including local PHP files outside the active theme directories. If the server and theme's pre-conditions are aligned unfavorably, the vulnerability may be exploited to gain unauthorized access to the system. Such vulnerabilities are dangerous as they enable attackers to breach the website's integrity and confidentiality. Detecting and addressing these vulnerabilities promptly helps prevent unauthorized access and mitigates potential damage. This scanner focuses on identifying and reporting any presence of this vulnerability within a WordPress installation.

The technical details of the WordPress Core Path Traversal vulnerability presume that an attacker can manipulate the `get_page_template()` function. This occurs when a crafted request to access a certain page template leads to unintended script execution or file access outside the designated theme directories. The typical endpoint involves the WP REST API requests, with vulnerable parameters being those related to page templates leading back into the core system files. Attackers exploit this by sending specifically crafted HTTP POST requests that trick the system into revealing or using restricted content. Understanding the endpoints and parameters involved in these operations allows developers and system administrators to implement proper fixes and defenses.

If exploited, the Path Traversal vulnerability could lead to unauthorized access to the web server's PHP files. This access might result in the disclosure of sensitive data or even remote code execution, facilitating further escalation of privileges by a malicious actor. The repercussions may involve data breaches, defacement, unauthorized transactions, or even loss of control over the website. Such attacks can severely undermine user trust, financial stability, and the reputation of the affected entity. Implementing a prompt and thorough security review and update upon detection can mitigate these possible adverse effects.

REFERENCES

Solution Advice
  • Update WordPress to the latest patched maintenance release compatible with your branch.
  • Consider implementing access controls to restrict sensitive PHP file inclusions.
  • Regularly audit code and infrastructure to identify potential vulnerabilities.
  • Employ a Web Application Firewall (WAF) to further protect against such exploits.
  • Monitor and log file access activities to detect unauthorized attempts promptly.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.