Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

SignalAdvertise
DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Bifrost
Bifrost

abraxas/CVE-2026-87902

CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)

Visit GitHub
Python
36
9
0
GNU Affero General Public License v3.0
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast abraxas/CVE-2026-87902 is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Sep 22 – Nov 5, 2026

Stars +18 in 45 days

0246
6

Forks +9 in 45 days

012
2

Merged PRs 0 in 45 days

01

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Sep 22Sep 28Oct 4Oct 10Oct 16Oct 22Oct 28Nov 3
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Tue, Sep 22, 2026+0+20
Wed, Sep 23, 2026+6+20
Thu, Sep 24, 2026+3+00
Fri, Sep 25, 2026+4+10
Sat, Sep 26, 2026+1+10
Sun, Sep 27, 2026+0+20
Mon, Sep 28, 2026+1+00
Tue, Sep 29, 2026+0+00
Wed, Sep 30, 2026+0+00
Thu, Oct 1, 2026+0+00
Fri, Oct 2, 2026+1+00
Sat, Oct 3, 2026+1+00
Sun, Oct 4, 2026+0+00
Mon, Oct 5, 2026+0+00
Tue, Oct 6, 2026+0+10
Wed, Oct 7, 2026+0+00
Thu, Oct 8, 2026+0+00
Fri, Oct 9, 2026+0+00
Sat, Oct 10, 2026+0+00
Sun, Oct 11, 2026+0+00
Mon, Oct 12, 2026+0+00
Tue, Oct 13, 2026+0+00
Wed, Oct 14, 2026+0+00
Thu, Oct 15, 2026+0+00
Fri, Oct 16, 2026+0+00
Sat, Oct 17, 2026+0+00
Sun, Oct 18, 2026+0+00
Mon, Oct 19, 2026+0+00
Tue, Oct 20, 2026+0+00
Wed, Oct 21, 2026+0+00
Thu, Oct 22, 2026+0+00
Fri, Oct 23, 2026+0+00
Sat, Oct 24, 2026+0+00
Sun, Oct 25, 2026+0+00
Mon, Oct 26, 2026+0+00
Tue, Oct 27, 2026+0+00
Wed, Oct 28, 2026+0+00
Thu, Oct 29, 2026+0+00
Fri, Oct 30, 2026+0+00
Sat, Oct 31, 2026+0+00
Sun, Nov 1, 2026+0+00
Mon, Nov 2, 2026+1+00
Tue, Nov 3, 2026+0+00
Wed, Nov 4, 2026+0+00
Thu, Nov 5, 2026+0+00
Total+18+90
  • 1#1 on the list
  • 7Rank that day
  • Not trending

Social mentions

Recent discussions about this repository across the web
  1. Sep 231 post

    • 🚨 CRITICAL | WordPress Core — CVE-2026-87902 A PoC by @abraxas_null has been released for an unauthenticated Local File Inclusion (LFI) flaw. 🔴 CVE: CVE-2026-87902 ⚠️ CVSS 4.0: 9.2 Critical ⚠️ CVSS…

      Read full on X, posted by @exploitgrid

      @exploitgrid · x.com

You might also like

Repositories close to abraxas/CVE-2026-87902
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

caveeroo/cve-2026-111497-wordpress-poc

Python

CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress

3112

sergiointel/wp2shell-poc

Python

Stock vulnerable wordpress RCE poc for wp2shell.

11427

0xsha/wp2shell

Python

CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core

12139

DeathShotXD/Comment2Shell

Python

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker

6517

Icex0/wp2shell-poc

Python

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

812201

Chocapikk/CVE-2023-6553

Python

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

8824

Boreas37/CVE-2026-64638-PoC-XSS2Shell-

Python

XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template

13032

junaire/CVE-2026-109618-exploit

Python
14485

ZephrFish/wp2shell-scanner

Python

CVE-2026-63030, CVE-2026-60137, wp2shell scanner

7116