Vendor reports: degradedResolved · vendor status “resolved”Official status API

Critical Security Update: WordPress Core Vulnerability (CVE-2026-87902)

Reported by IONOS · Hosting, CDN & Edge · source last read 3 min ago

Official source (opens in a new tab)
Vendor start
Sep 22, 2026, 21:37 UTC
Vendor's clock
Resolved
Sep 25, 2026, 07:56 UTC
Vendor's clock
First seen by Statuswall
Nov 11, 2026, 02:11 UTC
Statuswall's clock
Duration
2 d 10 h
From vendor start and resolution

Summary

Built from the facts below, no AI

Potential impact, not a confirmed outage of your systems.

What the vendor confirmed

  • IONOS reports degraded: "Critical Security Update: WordPress Core Vulnerability (CVE-2026-87902)".[E1, E2]
  • The vendor marked it resolved at 2026-09-25 07:56 UTC.[E3, E7]

Affected products and regions

  • Components: Wordpress Hosting, Wordpress Pro.[E6]

What is unknown

  • Which regions are affected: the vendor did not say.[E5]
  • Whether your own systems are affected: a vendor report cannot tell you; check your monitoring.

Last update in these facts: 2026-11-11 02:11 UTC · summary s1, evidence 459d31f7f0c5507a

Evidence (8)
  1. E1IONOS reports degraded. (vendor) source (opens in a new tab)
  2. E2Vendor title: "Critical Security Update: WordPress Core Vulnerability (CVE-2026-87902)". (vendor) source (opens in a new tab)
  3. E3Vendor status word: "resolved". (vendor) source (opens in a new tab)
  4. E4Vendor-reported start: 2026-09-22 21:37 UTC. (vendor) source (opens in a new tab)
  5. E5The vendor did not state which regions are affected. (Statuswall)
  6. E6Components the vendor attached: Wordpress Hosting, Wordpress Pro. (vendor) source (opens in a new tab)
  7. E7Vendor-reported resolution: 2026-09-25 07:56 UTC. (vendor) source (opens in a new tab)
  8. E8First seen by Statuswall: 2026-11-11 02:11 UTC. (Statuswall)

Affected scope

Not stated by the vendor

Components: Wordpress Hosting, Wordpress Pro

No region Statuswall recognises is stated for this incident (place names and provider-specific codes are not converted). It is not assumed to be global.

Potential relevance

IONOS is not in your stack. Follow it to see whether reports like this fall inside the regions you use.

Timeline

Vendor times come from the vendor. “Seen by Statuswall” times are when Statuswall noticed a change, which can lag the vendor by a few minutes. Statuswall does not store the vendor's update text; read it on the official page.

  1. Sep 22, 2026, 21:37 UTCVendor-reported startVendor time
  2. Sep 25, 2026, 07:56 UTCVendor-reported resolutionVendor time
  3. Nov 11, 2026, 02:11 UTCFirst seen by Statuswall (vendor status: resolved)Seen by Statuswall