WordPress pagename Path Traversal Probing (CVE-2026-87902)

Ankit Mehta@Secvyn

•updated Sep 24, 2026•0•0•4

Detects incoming HTTP requests where the 'pagename' parameter contains directory traversal sequences (e.g., '../', '..%2f'). These attempts are typically indicative of automated vulnerability scanning or exploitation attempts targeting WordPress page-template resolution logic, specifically related to CVE-2026-87902.