7.1.2 Patched a Hole That Reaches Back to 4.7
WordPress 7.1.2 fixed CVE-2026-87902, an unauthenticated path traversal in template resolution backported to 4.7. Probing began the same day it shipped.
vulnerability
WordPress 7.1.2 fixed CVE-2026-87902, an unauthenticated path traversal in template resolution backported to 4.7. Probing began the same day it shipped.