Critical Security Update: WordPress Core Vulnerability (CVE-2026-87902)

Summary

Critical Security Update: WordPress Core Vulnerability (CVE-2026-87902)

The issue has been resolved.

• Started

  Sep 22, 2026 · 5:37 PM

• Resolved

  Sep 25, 2026 · 3:56 AM

• Duration

  2d 10h 19m

• Severity

  Minor

• ◆

  Identified

  Sep 22 · 5:37 PM IONOS

  A critical security vulnerability affects WordPress versions 4.7.0 through 7.1.1, which can allow remote code execution under specific conditions. Managed WordPress Customers No action needed:IONOS is automatically patching your site and deploying proactive security measures Self-Managed WordPress Customers Action required: Update WordPress immediately to the latest version More updates will be posted here as new information becomes available.

• ✓

  Resolved

  Sep 25 · 3:56 AM IONOS

  The issue has been resolved.