{"metadata": {"vulnerability": "CVE-2026-105976", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-06T09:54:07.905Z", "date_only": false, "value": "2026-10-06T09:54:07.905Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-105976", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-10T06:00:08.151Z", "date_only": false, "value": "2026-10-10T06:00:08.151Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-105976", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-10T06:00:08.151Z", "date_only": false, "value": "2026-10-10T06:00:08.151Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-105976", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-10T06:05:24.401Z", "date_only": false, "value": "2026-10-10T06:05:24.401954Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117415105252238337", "record": "CVE-2026-105976", "field": "creation_timestamp", "uuid": "f9808be1-2904-4419-8cae-5404f8bbe6b9", "content": "CVE-2026-105976 Portfolio Filter Gallery < 2.2.1 - Contributor+ Missing Authorization via Multiple AJAX Actions The Portfolio Filter Gallery  WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105976https://wpscan.com/vulnerability/1ad36801-d53b-4253-ab7a-bd91c0f144f3/#CVE_2026_105976#bot", "url": "https://infosec.exchange/users/cve/statuses/117415105252238337"}, {"timestamp": "2026-10-10T06:16:40Z", "date_only": false, "value": "2026-10-10T06:16:40Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QPVH-MQ7H-9X9H", "record": "GHSA-QPVH-MQ7H-9X9H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-10T06:16:40.313Z", "date_only": false, "value": "2026-10-10T06:16:40.313", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105976", "record": "FKIE_CVE-2026-105976", "field": "published"}, {"timestamp": "2026-10-10T06:30:59Z", "date_only": false, "value": "2026-10-10T06:30:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QPVH-MQ7H-9X9H", "record": "GHSA-QPVH-MQ7H-9X9H", "field": "published"}, {"timestamp": "2026-10-10T12:04:06.320Z", "date_only": false, "value": "2026-10-10T12:04:06.320619Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105976", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-10T12:04:06.320Z", "date_only": false, "value": "2026-10-10T12:04:06.320619Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105976", "record": "FKIE_CVE-2026-105976", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-10T12:06:42.387Z", "date_only": false, "value": "2026-10-10T12:06:42.387Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-105976", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-10T12:06:42.387Z", "date_only": false, "value": "2026-10-10T12:06:42.387Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105976", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-10T12:30:24Z", "date_only": false, "value": "2026-10-10T12:30:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QPVH-MQ7H-9X9H", "record": "GHSA-QPVH-MQ7H-9X9H", "field": "modified"}, {"timestamp": "2026-10-13T20:36:00.850Z", "date_only": false, "value": "2026-10-13T20:36:00.850", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105976", "record": "FKIE_CVE-2026-105976", "field": "lastModified"}]}