wpbob.com - WordPress, built like it matters

A glowing blue file cabinet of folders with an amber path escaping over its top edge and down to a file outside it

WordPress Core CVE-2026-87902: Path Traversal Under Active Attack

A critical flaw in WordPress core, versions 4.7 through 7.1.1, lets unauthenticated attackers make WordPress run PHP files outside the theme. Attacks began hours after the September 22 patch. How it works and what to do.

Three server modules connected by a glowing conveyor: an open workshop, a module scanning a package, and a sealed module marked with a shield

Why Dev, Staging and Prod? Because Production Isn't a Test Environment

An image file passing a security scanner marked safe, emerging on the other side as a glowing amber PHP code file

Bricksforge CVE-2026-85097: Unauthenticated Code Execution Under Active Attack

Latest articles

Server rack control panel with rows of toggle switches, most switched off and a few glowing teal

Development Oct 19, 2026

WordPress Classic Enterprise, or How I Built wpbob.com

Explore popular topics

CVE Watch

Blog

Why Dev, Staging and Prod? Because Production Isn't a Test Environment

Development

WordPress Classic Enterprise, or How I Built wpbob.com