Attackers Exploit WordPress CVE202687902 Within Hours of Disclosure

Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure The vulnerability in question is CVE202687902 CVSS score 92 which could allow an unauthenticated attacker to obtain remote code execution RCE An unauthenticated attacker can make getpagetemplate pagetemplate resolution include a chosen readable local php file