Archive

  1. RepoSecurity30 Sept 2026

    WordPress Path Traversal

    This repository provides a proof-of-concept for CVE-2026-87902, an unauthenticated path traversal in WordPress Core enabling local PHP inclusion and conditional RCE. It includes a pinned vulnerable lab, making it timely and practical for testing.