What happened
CISA added CVE-2026-87902 to the KEV catalog on 2026-09-25 with confirmed in-the-wild exploitation. The unauthenticated RFI in page-template resolution leads to RCE; exploitation began within hours of the advisory, and the Singapore Cyber Security Agency escalated an active-exploitation alert on 2026-09-24.
Why it matters
WordPress is the deployment target for a very large population of AI/LLM plugins (WPForms AI form builder, Better Messages AI chat, MCP Server for WordPress, wpForo AI requests) covered in this same NVD batch. An internet-facing, actively-exploited core RCE is the precondition attackers use to plant malicious AI-agent configs and payloads on compromised sites — so this KEV entry is directly relevant to the AI plugin ecosystem even though the flaw itself is in core.
Attack vector
Unauthenticated attacker makes page-template resolution include a chosen readable local .php file outside active theme directories, achieving remote code execution; defenders observed shell-command file writes within a day of the advisory.
Affected systems
WordPress Core (unauthenticated remote file inclusion in page-template resolution leading to RCE).
Mitigation
Apply the WordPress core security patch (GitHub advisory GHSA-7hp8-65ch-5whp); federal due date 2026-09-28 per KEV; keep all AI plugins updated since WordPress compromise typically precedes plugin compromise.