{"metadata": {"vulnerability": "CVE-2026-109982", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-13T12:10:03.110Z", "date_only": false, "value": "2026-10-13T12:10:03.110Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109982", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T06:00:14.108Z", "date_only": false, "value": "2026-10-16T06:00:14.108Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109982", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T06:00:14.108Z", "date_only": false, "value": "2026-10-16T06:00:14.108Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-109982", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T06:25:29.783Z", "date_only": false, "value": "2026-10-16T06:25:29.783861Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117449158118059884", "record": "CVE-2026-109982", "field": "creation_timestamp", "uuid": "b09d03e4-b13b-443d-8a69-1e0ff7a66eab", "content": "CVE-2026-109982 MB Custom Post Types & Custom Taxonomies < 2.12.2 - Subscriber+ Missing Authorization via CPT UI Migration The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a capability check or validate a nonce on its migration actions, allowing any authenticated user, such as a subscriber, to trigger a one-way migration that creates published records and permanently deletes a companion MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2's entire post-type and taxonomy configuration.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109982https://wpscan.com/vulnerability/27787d4e-1633-4eb6-bcf4-0a8586df3d47/#CVE_2026_109982#bot", "url": "https://infosec.exchange/users/cve/statuses/117449158118059884"}, {"timestamp": "2026-10-16T07:17:10Z", "date_only": false, "value": "2026-10-16T07:17:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-45HQ-3VXW-Q94X", "record": "GHSA-45HQ-3VXW-Q94X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T07:17:10.030Z", "date_only": false, "value": "2026-10-16T07:17:10.030", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109982", "record": "FKIE_CVE-2026-109982", "field": "published"}, {"timestamp": "2026-10-16T09:30:26Z", "date_only": false, "value": "2026-10-16T09:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-45HQ-3VXW-Q94X", "record": "GHSA-45HQ-3VXW-Q94X", "field": "published"}, {"timestamp": "2026-10-16T14:38:53.458Z", "date_only": false, "value": "2026-10-16T14:38:53.458124Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109982", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-16T14:38:53.458Z", "date_only": false, "value": "2026-10-16T14:38:53.458124Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109982", "record": "FKIE_CVE-2026-109982", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T14:49:21.095Z", "date_only": false, "value": "2026-10-16T14:49:21.095Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109982", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T14:49:21.095Z", "date_only": false, "value": "2026-10-16T14:49:21.095Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109982", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:17:08.307Z", "date_only": false, "value": "2026-10-16T15:17:08.307", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109982", "record": "FKIE_CVE-2026-109982", "field": "lastModified"}, {"timestamp": "2026-10-16T15:38:34Z", "date_only": false, "value": "2026-10-16T15:38:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-45HQ-3VXW-Q94X", "record": "GHSA-45HQ-3VXW-Q94X", "field": "modified"}]}