CVE-2026-87902 scored 9.2 out of 10, affected every WordPress version since 2016, and was actively exploited within 24 hours of disclosure — no login required. Most site owners never heard a word about it. That silence is the real vulnerability. Knowing your site runs WordPress is not the same as knowing what is happening to it. #WordPress #WordPressSecurity #CyberSecurity #SecurityHardening https://wpguy.uk/blog/cve-2026-87902-the-wordpress-flaw-most-owners-missed/