{"metadata": {"vulnerability": "CVE-2026-104763", "count": 15, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-10-02T12:36:56.500Z", "date_only": false, "value": "2026-10-02T12:36:56.500Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-104763", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-02T12:52:03Z", "date_only": false, "value": "2026-10-02T12:52:03.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-104763", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-09T17:27:58Z", "date_only": false, "value": "2026-10-09T17:27:58.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-104763", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-10T05:30:59.595Z", "date_only": false, "value": "2026-10-10T05:30:59.595Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-104763", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-10T05:30:59.595Z", "date_only": false, "value": "2026-10-10T05:30:59.595Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-104763", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-10T05:44:27.892Z", "date_only": false, "value": "2026-10-10T05:44:27.892378Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117415022906549821", "record": "CVE-2026-104763", "field": "creation_timestamp", "uuid": "0671658e-88a9-4e66-89d1-3ca62ff5a8c6", "content": "CVE-2026-104763 Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_path' Parameter in media_metadata.json The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_path' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. This requires the attacker to upload a crafted ZIP archive containing a media_metadata.json file with path traversal sequences in the file_path field while specifying an allowed file extension for the destination filename to bypass the extension guard introduced in version 1.13.2.\nhttps://www.cve.org/CVERecord?id=CVE-2026-104763https://www.wordfence.com/threat-intel/vulnerabilities/id/71a6ba3d-0473-46c9-8040-b415807f4073?source=cvehttps://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-media-handler.php#L575https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-media-handler.php#L573https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-media-handler.php#L982https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-media-handler.php#L500https://plugins.svn.wordpress.org/post-export-import-with-media/trunk/https://plugins.trac.wordpress.org/changeset/3726363/post-export-import-with-media/trunk/includes/class-media-handler.php#wordpress #wpazleen #PostExportImportwithMedia#CVE_2026_104763#bot", "url": "https://infosec.exchange/users/cve/statuses/117415022906549821"}, {"timestamp": "2026-10-10T06:16:39Z", "date_only": false, "value": "2026-10-10T06:16:39Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VXWP-9PCG-465R", "record": "GHSA-VXWP-9PCG-465R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-10T06:16:39.857Z", "date_only": false, "value": "2026-10-10T06:16:39.857", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104763", "record": "FKIE_CVE-2026-104763", "field": "published"}, {"timestamp": "2026-10-10T06:30:59Z", "date_only": false, "value": "2026-10-10T06:30:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VXWP-9PCG-465R", "record": "GHSA-VXWP-9PCG-465R", "field": "published"}, {"timestamp": "2026-10-10T06:30:59Z", "date_only": false, "value": "2026-10-10T06:30:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VXWP-9PCG-465R", "record": "GHSA-VXWP-9PCG-465R", "field": "modified"}, {"timestamp": "2026-10-11T16:42:45.320Z", "date_only": false, "value": "2026-10-11T16:42:45.320581Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-104763", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-11T16:42:45.320Z", "date_only": false, "value": "2026-10-11T16:42:45.320581Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104763", "record": "FKIE_CVE-2026-104763", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-11T16:55:17.696Z", "date_only": false, "value": "2026-10-11T16:55:17.696Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-104763", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-11T16:55:17.696Z", "date_only": false, "value": "2026-10-11T16:55:17.696Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-104763", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T13:30:21.620Z", "date_only": false, "value": "2026-10-13T13:30:21.620", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-104763", "record": "FKIE_CVE-2026-104763", "field": "lastModified"}]}