Nicheloom visits: 58,189 all-time · 7,637 in the last 7 days

The opportunity tracker for new startups.

Today: 1,008 launches · Niche of the day: specialized calculation tools · See what launched today →

CVE-2026-87902

Unauthenticated RCE on Wordpress

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Want to reach these readers? Sponsor an issue.

GITHUB · launched Sep 22, 2026 · 9 upvotes (top 80%) · 1 view

Niche: exploit proof of concept repositories · 134 launches, 7 in the last 7 days ▼ -22% · Explore this niche →

Category and tags

  • Security
  • Dev tools
  • Developer
  • Not AI
  • Hobby / open-source project
  • cve
  • cve-2026-87902
  • ghsa-7hp8-65ch-5whp
  • path-traversal
  • poc
  • rce
  • +1 more

Visit website ↗ Source listing ↗

Could you build this?

No Discovering and engineering an unauthenticated remote code execution exploit against WordPress requires deep offensive cybersecurity and exploit development expertise.

What it would actually take: Requires dynamic and static analysis of PHP codebases (WordPress core or target plugins) to identify deserialization, file upload, or memory/logic vulnerabilities. The hard part is chaining sanitization bypasses and memory/flow manipulations to achieve reliable, remote code execution without authentication. Demands specialized reverse engineering and offensive security research skills.

Competitors

Other products that read as similar to this one : 398 launches clear the similarity bar, closest 8 shown.

Attention rank: #334 of 399 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 302 days after the earliest competitor.

The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.