{"metadata": {"vulnerability": "CVE-2026-105261", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-04T19:13:44.602Z", "date_only": false, "value": "2026-10-04T19:13:44.602Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-105261", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T06:00:09.358Z", "date_only": false, "value": "2026-10-14T06:00:09.358Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-105261", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T06:00:09.358Z", "date_only": false, "value": "2026-10-14T06:00:09.358Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-105261", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T07:17:00Z", "date_only": false, "value": "2026-10-14T07:17:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GFHC-X3J2-83WF", "record": "GHSA-GFHC-X3J2-83WF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T07:17:00.480Z", "date_only": false, "value": "2026-10-14T07:17:00.480", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105261", "record": "FKIE_CVE-2026-105261", "field": "published"}, {"timestamp": "2026-10-14T09:31:31Z", "date_only": false, "value": "2026-10-14T09:31:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GFHC-X3J2-83WF", "record": "GHSA-GFHC-X3J2-83WF", "field": "published"}, {"timestamp": "2026-10-14T13:31:54.386Z", "date_only": false, "value": "2026-10-14T13:31:54.386389Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105261", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-14T13:31:54.386Z", "date_only": false, "value": "2026-10-14T13:31:54.386389Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105261", "record": "FKIE_CVE-2026-105261", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T13:42:24.402Z", "date_only": false, "value": "2026-10-14T13:42:24.402Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-105261", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T13:42:24.402Z", "date_only": false, "value": "2026-10-14T13:42:24.402Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105261", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:32:16Z", "date_only": false, "value": "2026-10-14T15:32:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GFHC-X3J2-83WF", "record": "GHSA-GFHC-X3J2-83WF", "field": "modified"}, {"timestamp": "2026-10-14T16:14:02.800Z", "date_only": false, "value": "2026-10-14T16:14:02.800", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105261", "record": "FKIE_CVE-2026-105261", "field": "lastModified"}, {"timestamp": "2026-10-14T16:59:14.128Z", "date_only": false, "value": "2026-10-14T16:59:14.128049Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440325451607657", "record": "CVE-2026-105261", "field": "creation_timestamp", "uuid": "5c6f3483-76bd-40e4-9591-75f6d8971739", "content": "CVE-2026-105261 PublishPress Future 4.10.1 - 4.10.5 - Contributor+ Stored XSS via 'wrapper' and 'dateformat' Shortcode Attributes The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting element, allowing users with the Contributor role and above to store JavaScript that executes in the session of any higher-privileged user who views the content.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105261https://wpscan.com/vulnerability/b340566c-6c45-4391-aefe-76ae7f5ba77f/#CVE_2026_105261#bot", "url": "https://infosec.exchange/users/cve/statuses/117440325451607657"}]}