Robert Ressl

Security researcher who reported the vulnerability

Appears in 1 story

Last updated Sep 23, 2026

Stories

WordPress patches critical flaw present in every version since 2016

Rule Changes

As of September 2026: Credited as the reporter of CVE-2026-87902

A critical flaw in WordPress core has sat in every release since 2016. On September 22, WordPress shipped a fix in version 7.1.2 — and attackers began probing for vulnerable sites within five hours.

Updated Sep 22