WordPress pagename Parameter Path Traversal (CVE-2026-87902)

Ankit Mehta@Secvyn

•updated Sep 24, 2026•0•0•6

Detects incoming web requests containing a 'pagename' parameter with URL-encoded path traversal sequences, which could allow unauthorized file access or directory traversal attacks against WordPress page-template resolution as described in CVE-2026-87902.