{"total":1,"items":[{"id":140,"title":"CVE-2026-87902: WordPress Core Remote File Inclusion Vulnerability","original_title":"CVE-2026-87902: WordPress Core Remote File Inclusion Vulnerability","source_rating":null,"summary":"WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.\n\nVereiste actie: Apply mitigations in accordance with vendor in","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87902","type":"kev","language":"en","published_at":"2026-09-25T00:00:00+00:00","severity":"hoog","priority":68,"vendors":["PHP","WordPress"],"cves":[{"id":"CVE-2026-87902","cvss":8.1,"epss":0.45501,"epss_percentile":0.98756,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":8.1,"epss_max":0.45501,"source_count":3,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null}]}