{"metadata": {"vulnerability": "CVE-2026-109145", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-12T11:31:37.892Z", "date_only": false, "value": "2026-10-12T11:31:37.892Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109145", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T06:00:14.074Z", "date_only": false, "value": "2026-10-15T06:00:14.074Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109145", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T06:00:14.074Z", "date_only": false, "value": "2026-10-15T06:00:14.074Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-109145", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T06:38:22.974Z", "date_only": false, "value": "2026-10-15T06:38:22.974956Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117443546465051392", "record": "CVE-2026-109145", "field": "creation_timestamp", "uuid": "f9e565ab-5a6a-49df-b912-1d8a9718b227", "content": "CVE-2026-109145 User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration Handler The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registration handlers and assigns newly registered accounts a role that was created as a copy of the administrator role, allowing unauthenticated attackers to register an administrator-equivalent account and take over the site.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109145https://wpscan.com/vulnerability/62aa4b8c-b9f5-44f4-ac5a-220c14eb719a/#CVE_2026_109145#bot", "url": "https://infosec.exchange/users/cve/statuses/117443546465051392"}, {"timestamp": "2026-10-15T07:17:58Z", "date_only": false, "value": "2026-10-15T07:17:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FX4M-FW5F-HRM2", "record": "GHSA-FX4M-FW5F-HRM2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T07:17:58.617Z", "date_only": false, "value": "2026-10-15T07:17:58.617", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109145", "record": "FKIE_CVE-2026-109145", "field": "published"}, {"timestamp": "2026-10-15T09:30:32Z", "date_only": false, "value": "2026-10-15T09:30:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FX4M-FW5F-HRM2", "record": "GHSA-FX4M-FW5F-HRM2", "field": "published"}, {"timestamp": "2026-10-15T10:37:53.746Z", "date_only": false, "value": "2026-10-15T10:37:53.746432Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109145", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-15T10:37:53.746Z", "date_only": false, "value": "2026-10-15T10:37:53.746432Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109145", "record": "FKIE_CVE-2026-109145", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T11:01:27.324Z", "date_only": false, "value": "2026-10-15T11:01:27.324Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109145", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T11:01:27.324Z", "date_only": false, "value": "2026-10-15T11:01:27.324Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109145", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T12:07:07.554Z", "date_only": false, "value": "2026-10-15T12:07:07.554577Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxvzlipfvf2l", "record": "CVE-2026-109145", "field": "creation_timestamp", "uuid": "a8d8ad1b-992a-45ba-bfcb-bdab4bf57fb5", "content": "\ud83d\udea8 CVE-2026-109145 \u2014 CVSS 9.8 CRITICAL\n\nThe User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-109145\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxvzlipfvf2l"}, {"timestamp": "2026-10-15T12:20:04.374Z", "date_only": false, "value": "2026-10-15T12:20:04.374756Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxw2cnwpzu2l", "record": "CVE-2026-109145", "field": "creation_timestamp", "uuid": "ca06619e-37fa-4db8-8eb0-37f981cfb82b", "content": "CVE-2026-109145 - user rights access manager\nThe User Rights Access Manager plugin for WordPress does not properly protect one of its registration functions. Because of this, anyone on the internet can sign up and be\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxw2cnwpzu2l"}, {"timestamp": "2026-10-15T12:31:00Z", "date_only": false, "value": "2026-10-15T12:31:00Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FX4M-FW5F-HRM2", "record": "GHSA-FX4M-FW5F-HRM2", "field": "modified"}, {"timestamp": "2026-10-15T14:47:05.720Z", "date_only": false, "value": "2026-10-15T14:47:05.720", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109145", "record": "FKIE_CVE-2026-109145", "field": "lastModified"}]}