{"metadata": {"vulnerability": "CVE-2026-105977", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-06T09:54:09.734Z", "date_only": false, "value": "2026-10-06T09:54:09.734Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-105977", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-10T06:00:08.328Z", "date_only": false, "value": "2026-10-10T06:00:08.328Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-105977", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-10T06:00:08.328Z", "date_only": false, "value": "2026-10-10T06:00:08.328Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-105977", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-10T06:06:04.804Z", "date_only": false, "value": "2026-10-10T06:06:04.804181Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117415107896822929", "record": "CVE-2026-105977", "field": "creation_timestamp", "uuid": "f00f96d4-cc0e-4bf0-bd08-aa2788a3a374", "content": "CVE-2026-105977 Portfolio Filter Gallery 2.0.2 - 2.2.0 - Contributor+ Cross-User Video Thumbnail Deletion via pfg_delete_video_thumbnail The Portfolio Filter Gallery  WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105977https://wpscan.com/vulnerability/6ad219b8-3633-4c54-a6cf-71cc0acf035e/#CVE_2026_105977#bot", "url": "https://infosec.exchange/users/cve/statuses/117415107896822929"}, {"timestamp": "2026-10-10T06:16:40Z", "date_only": false, "value": "2026-10-10T06:16:40Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-57VV-9G8J-WFP9", "record": "GHSA-57VV-9G8J-WFP9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-10T06:16:40.427Z", "date_only": false, "value": "2026-10-10T06:16:40.427", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105977", "record": "FKIE_CVE-2026-105977", "field": "published"}, {"timestamp": "2026-10-10T06:30:59Z", "date_only": false, "value": "2026-10-10T06:30:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-57VV-9G8J-WFP9", "record": "GHSA-57VV-9G8J-WFP9", "field": "published"}, {"timestamp": "2026-10-10T12:03:54.191Z", "date_only": false, "value": "2026-10-10T12:03:54.191844Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105977", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-10T12:03:54.191Z", "date_only": false, "value": "2026-10-10T12:03:54.191844Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105977", "record": "FKIE_CVE-2026-105977", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-10T12:06:42.255Z", "date_only": false, "value": "2026-10-10T12:06:42.255Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-105977", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-10T12:06:42.255Z", "date_only": false, "value": "2026-10-10T12:06:42.255Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105977", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-10T12:30:24Z", "date_only": false, "value": "2026-10-10T12:30:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-57VV-9G8J-WFP9", "record": "GHSA-57VV-9G8J-WFP9", "field": "modified"}, {"timestamp": "2026-10-13T20:36:00.850Z", "date_only": false, "value": "2026-10-13T20:36:00.850", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105977", "record": "FKIE_CVE-2026-105977", "field": "lastModified"}]}