Python · MIT
ressl/cve-2026-87902-poc
PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab
★ 45
Stars
8 forks · 0 open issues
+2.0/wk
Growth · measured
Stars counted between two of our own snapshots roughly a week apart. The repository page gives the exact span.
23.3
Momentum / 100
see the breakdown below
46d ago
Created
last push 46d ago
Star history
How this score was built
| Component | Weight | Earned | Why |
|---|---|---|---|
| Velocity | 55 | 2.1 | +2.0/wk, log-scaled against a 750/day ceiling |
| Acceleration | 15 | 5.0 | last week ran 1.33× the monthly pace |
| Freshness | 15 | 11.4 | last push 46d ago; decays to zero at 180 days |
| Scale | 15 | 4.8 | 45 stars, log-scaled against 150k — stops a 3-star repo topping the board |
| Momentum | 100 | 23.3 | sum of the above |
Detail
| Topics | cvecve-2026-87902lfiproof-of-conceptrcesecurityvulnerabilitywordpress |
| Matched on | Security (security) |
| Short window | +2 stars over 7 days = 0.3/day |
| Long window | +3 stars over 14 days = 0.2/day |
| Lifetime average | 1.03 stars/day over 44 days |
| First seen here | 2026-10-22 |
| Last read | 2d ago |