{"total":4,"items":[{"id":140,"title":"CVE-2026-87902: WordPress Core Remote File Inclusion Vulnerability","original_title":"CVE-2026-87902: WordPress Core Remote File Inclusion Vulnerability","source_rating":null,"summary":"WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.\n\nVereiste actie: Apply mitigations in accordance with vendor in","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87902","type":"kev","language":"en","published_at":"2026-09-25T00:00:00+00:00","severity":"hoog","priority":68,"vendors":["PHP","WordPress"],"cves":[{"id":"CVE-2026-87902","cvss":8.1,"epss":0.45501,"epss_percentile":0.98757,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":8.1,"epss_max":0.45501,"source_count":3,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":29,"title":"Kwetsbaarheid in WordPress wordt actief misbruikt: update nu","original_title":"Kwetsbaarheid in WordPress wordt actief misbruikt: update nu","source_rating":null,"summary":"Er is een kwetsbaarheid gevonden in WordPress met het kenmerk CVE-2026-87902. Deze kwetsbaarheid kan een hoog risico vormen omdat een aanvaller zonder inloggegevens mogelijk schadelijke acties kan uitvoeren op de server waar de WordPress website op draait. De kans op misbruik wordt als ‘normaal’ beoordeeld met de mogel","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/kwetsbaarheid-in-wordpress-wordt-actief-misbruikt-update-nu","type":"news","language":"nl","published_at":"2026-09-24T10:30:00+00:00","severity":"kritiek","priority":88,"vendors":["WordPress"],"cves":[{"id":"CVE-2026-87902","cvss":8.1,"epss":0.45501,"epss_percentile":0.98757,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":8.1,"epss_max":0.45501,"source_count":3,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":417,"title":"Kwetsbaarheid verholpen in WordPress","original_title":"Kwetsbaarheid verholpen in WordPress","source_rating":null,"summary":"De ontwikkelaars van WordPress hebben een kwetsbaarheid verholpen in WordPress.\n\nEen kwaadwillende kan de kwetsbaarheid met kenmerk CVE-2026-87902 misbruiken, om zonder authenticatie een lokaal PHP-bestand buiten de actieve themamappen door WordPress te laten inladen. Onder bepaalde voorwaarden met betrekking tot het a","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0389","type":"advisory","language":"nl","published_at":"2026-09-24T09:14:33+00:00","severity":"kritiek","priority":83,"vendors":["WordPress"],"cves":[{"id":"CVE-2026-87902","cvss":8.1,"epss":0.45501,"epss_percentile":0.98757,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":8.1,"epss_max":0.45501,"source_count":3,"ncsc":{"kans":"M","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":620,"title":"Advies van de AP aan WordPress-gebruikers die getroffen zijn door datalek","original_title":"Advies van de AP aan WordPress-gebruikers die getroffen zijn door datalek","source_rating":null,"summary":"Recent zijn kwetsbaarheden ontdekt in de WordPress-software. WordPress wordt relatief veel gebruikt in Nederland. De kwetsbaarheden in WordPress worden momenteel actief misbruikt, met datalekken tot…","ai":false,"actions":[],"url":"https://autoriteitpersoonsgegevens.nl/actueel/advies-van-de-ap-aan-wordpress-gebruikers-die-getroffen-zijn-door-datalek","type":"news","language":"nl","published_at":"2026-08-27T15:04:43+00:00","severity":"laag","priority":5,"vendors":["WordPress"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"autoriteit-persoonsgegevens","name":"Autoriteit Persoonsgegevens","category":"overheid","country":"NL","license":"© Autoriteit Persoonsgegevens, citeren met bronvermelding","reuse":"excerpt"},"bundle":null}]}