{"metadata": {"vulnerability": "CVE-2026-104748", "count": 19, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-10-02T12:06:56.683Z", "date_only": false, "value": "2026-10-02T12:06:56.683Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-104748", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-03T14:35:51Z", "date_only": false, "value": "2026-10-03T14:35:51.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-104748", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-13T19:40:33Z", "date_only": false, "value": "2026-10-13T19:40:33.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-104748", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-14T07:43:35.763Z", "date_only": false, "value": "2026-10-14T07:43:35.763Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-104748", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T07:43:35.763Z", "date_only": false, "value": "2026-10-14T07:43:35.763Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-104748", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T08:17:02Z", "date_only": false, "value": "2026-10-14T08:17:02Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5HQH-JVJF-MPVW", "record": "GHSA-5HQH-JVJF-MPVW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T08:17:02.997Z", "date_only": false, "value": "2026-10-14T08:17:02.997", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104748", "record": "FKIE_CVE-2026-104748", "field": "published"}, {"timestamp": "2026-10-14T08:50:05.794Z", "date_only": false, "value": "2026-10-14T08:50:05.794973Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxt64bmi3g27", "record": "CVE-2026-104748", "field": "creation_timestamp", "uuid": "9a685c79-ba69-4776-a5d1-177f3e19c811", "content": "CVE-2026-104748 - simpleform \u2013 form maker to chat apps with quiz, poll and multi lead notifications\nThe SimpleForm form\u2011maker plugin for WordPress (versions up to 3.10.0) allows anyone on the internet to register a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wpazleen #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxt64bmi3g27"}, {"timestamp": "2026-10-14T09:31:34Z", "date_only": false, "value": "2026-10-14T09:31:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5HQH-JVJF-MPVW", "record": "GHSA-5HQH-JVJF-MPVW", "field": "published"}, {"timestamp": "2026-10-14T09:31:34Z", "date_only": false, "value": "2026-10-14T09:31:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5HQH-JVJF-MPVW", "record": "GHSA-5HQH-JVJF-MPVW", "field": "modified"}, {"timestamp": "2026-10-14T10:07:19.219Z", "date_only": false, "value": "2026-10-14T10:07:19.219412Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtcge7y3y2n", "record": "CVE-2026-104748", "field": "creation_timestamp", "uuid": "22c8f5e8-11d3-4146-9859-91697a858fcf", "content": "\ud83d\udea8 CVE-2026-104748 \u2014 CVSS 9.8 CRITICAL\n\nThe SimpleForm \u2013 Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104748\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtcge7y3y2n"}, {"timestamp": "2026-10-14T10:30:27.207Z", "date_only": false, "value": "2026-10-14T10:30:27.207970Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117438796690406138", "record": "cve-2026-104748", "field": "creation_timestamp", "uuid": "bbe053eb-d072-4cf2-bc41-9a13074b2192", "content": "CVE-2026-104748: CRITICAL privilege escalation in SimpleForm WordPress plugin (<=3.10.0). Unauth users can gain admin via exposed AJAX and weak nonce. Disable/limit access until patched. Full details: https://radar.offseq.com/threat/cve-2026-104748-cwe-269-improper-privilege-management-in-wpazleen-simpleform-form-maker-to-chat-apps-e30303ee252058a1 #OffSeq #WordPress #PrivilegeEscalation #CVE2026104748", "url": "https://infosec.exchange/users/offseq/statuses/117438796690406138"}, {"timestamp": "2026-10-14T10:30:29.235Z", "date_only": false, "value": "2026-10-14T10:30:29.235987Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxtdprdo3v2e", "record": "cve-2026-104748", "field": "creation_timestamp", "uuid": "16251226-1529-4aa4-99e5-66d0f3347eda", "content": "CVE-2026-104748: CRITICAL in SimpleForm WordPress plugin (<=3.10.0) \u2014 unauthenticated attackers can create admin accounts via exposed AJAX endpoint. Disable or restrict plugin use until patched. https://radar.offseq.com/threat/cve-2026-104748-cwe-269-improper-privilege-management-in-wpazleen-simp...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxtdprdo3v2e"}, {"timestamp": "2026-10-14T17:34:55.029Z", "date_only": false, "value": "2026-10-14T17:34:55.029940Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440465764140585", "record": "CVE-2026-104748", "field": "creation_timestamp", "uuid": "fbeea0f7-fda5-4e5c-be62-550c3d7ac67f", "content": "CVE-2026-104748 SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register The SimpleForm \u2013 Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the `wp_ajax_nopriv_simpleform_wp_register` AJAX action lacking any capability check for role assignment and the `save_custom_fields_to_user_meta()` function using an exclusion list that omits `wp_capabilities`, combined with `get_form_settings()` returning a hard-coded defaults array that unconditionally enables meta writing regardless of the supplied `form_id`. This makes it possible for unauthenticated attackers to create a new Administrator-level WordPress account by supplying `wp_capabilities[administrator]=1` alongside standard registration fields. The nonce required by the endpoint is publicly emitted into the `front_end_data` JavaScript object on every front-end page via `wp_enqueue_scripts`, making it trivially obtainable by any unauthenticated visitor before submitting the malicious request.\nhttps://www.cve.org/CVERecord?id=CVE-2026-104748https://www.wordfence.com/threat-intel/vulnerabilities/id/b2b973fe-1209-43dc-b2a3-74086b12fe97?source=cvehttps://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.0/app/Integrations/WordPressAuth.php#L291https://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.0/app/Integrations/WordPressAuth.php#L184https://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.0/app/Integrations/WordPressAuth.php#L32https://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.0/app/Assets.php#L265https://plugins.svn.wordpress.org/simple-form/trunk/https://plugins.trac.wordpress.org/changeset/3726513/simple-form/trunk/app/Integrations/WordPressAuth.php#wordpress #wpazleen #SimpleForm\u2013FormMakertoChatAppswithQuiz,PollandMultiLeadNotifications#CVE_2026_104748#bot", "url": "https://infosec.exchange/users/cve/statuses/117440465764140585"}, {"timestamp": "2026-10-15T10:51:33.935Z", "date_only": false, "value": "2026-10-15T10:51:33.935369Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-104748", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T10:51:33.935Z", "date_only": false, "value": "2026-10-15T10:51:33.935369Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104748", "record": "FKIE_CVE-2026-104748", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T16:43:48.707Z", "date_only": false, "value": "2026-10-15T16:43:48.707Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-104748", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:43:48.707Z", "date_only": false, "value": "2026-10-15T16:43:48.707Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-104748", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T17:17:11.513Z", "date_only": false, "value": "2026-10-15T17:17:11.513", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104748", "record": "FKIE_CVE-2026-104748", "field": "lastModified"}]}