CPE
WordPress: Multiple vulnerabilities in versions prior to 7.1.4
2 TTPs 1 CVEMultiple vulnerabilities in WordPress versions prior to 7.1.4 allow remote attackers to execute arbitrary code, conduct denial-of-service, perform unauthorized data access, and bypass security policies.
Unauthenticated Remote Code Execution in WordPress
2 TTPs 1 CVECVE-2026-87902 allows unauthenticated remote code execution in WordPress by enabling the loading of arbitrary files outside of legitimate theme directories.
Multiple Vulnerabilities in WordPress
2 TTPs 1 CVEWordPress is susceptible to multiple vulnerabilities that may allow unauthenticated attackers to achieve remote code execution, bypass security controls, perform cross-site scripting, or access sensitive data.
WordPress Exploitation and Data Exfiltration by Red Heron Affiliate
1 rule 2 TTPs 5 CVEs 3 IOCsAn adversary linked to the Red Heron group is exploiting multiple vulnerabilities in WordPress, Ubiquiti, and ZyXEL devices to conduct reconnaissance, gain persistence, and exfiltrate sensitive records, including over 18,000 government documents.