Urgent.News

What's breaking now, across thousands of outlets.

Thursday, 24 September 2026 Reading Room

Tech

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). "An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file

thehackernews.com ·

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

We haven't written up this one. The Hacker News has the full story — the link below goes straight to it.

Read the original at thehackernews.com →

More in Tech

Enqueue Hooks: Four Hooks, Four Different Zones — and How Not to Mix Them Up

On the surface, these five hooks all do the same thing — load CSS/JS. But four of them sound almost identical while each one runs in a different zone of the site.

  • wpenqueuescripts loads front-end CSS and JavaScript
  • adminenqueuescripts for admin area only, avoids performance issues
  • enqueueblockeditorassets for block editor styles, not front-end

·dev.to

One core, two hosts

First published on openspec-ui.dev . OpenSpec Workbench ships in two forms: a VS Code extension and a standalone web application that runs on your machine.

  • OpenSpec Workbench has Visual Studio Code extension and standalone web app versions
  • Core handles execution, OpenSpec and Git integration, security, persistence
  • Thin adapters allow shared core to run on different hosts

·dev.to

Lean and how it relate to IT

Lean is a way of thinking: deliver value to the customer with less waste, by improving the system on purpose. That matters to us because software work is the same way: we turn an idea into a running…

·dev.to

More from Thursday 24 September →