{"metadata": {"vulnerability": "CVE-2026-115607", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-23T00:18:53.712Z", "date_only": false, "value": "2026-10-23T00:18:53.712Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-115607", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-26T12:10:35Z", "date_only": false, "value": "2026-10-26T12:10:35.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-115607", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T13:00:12.493Z", "date_only": false, "value": "2026-10-28T13:00:12.493Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-115607", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-28T13:00:12.493Z", "date_only": false, "value": "2026-10-28T13:00:12.493Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-115607", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T13:10:24.634Z", "date_only": false, "value": "2026-10-28T13:10:24.634463Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117518698030623061", "record": "CVE-2026-115607", "field": "creation_timestamp", "uuid": "ad304095-d332-46ed-9aac-2a28a5973b1f", "content": "CVE-2026-115607 WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows SQL Injection.This issue affects DXP ToolKit: from n/a through 2.0.1.\nhttps://www.cve.org/CVERecord?id=CVE-2026-115607https://patchstack.com/database/wordpress/plugin/dxp-toolkit/vulnerability/wordpress-dxp-toolkit-plugin-2-0-1-sql-injection-vulnerability?_s_id=cve#CrowdFavorite #DXPToolKit#CVE_2026_115607#bot", "url": "https://infosec.exchange/users/cve/statuses/117518698030623061"}, {"timestamp": "2026-10-28T13:17:04Z", "date_only": false, "value": "2026-10-28T13:17:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GJ44-V26Q-V728", "record": "GHSA-GJ44-V26Q-V728", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-28T13:17:04.993Z", "date_only": false, "value": "2026-10-28T13:17:04.993", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-115607", "record": "FKIE_CVE-2026-115607", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T14:08:01.266Z", "date_only": false, "value": "2026-10-28T14:08:01.266355Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mywwfnse4s2w", "record": "CVE-2026-115607", "field": "creation_timestamp", "uuid": "8ac7bf6a-aab2-491f-9927-3a1f9983fb3f", "content": "\ud83d\udea8 CVE-2026-115607 \u2014 CVSS 9.3 CRITICAL\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-115607\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mywwfnse4s2w"}, {"timestamp": "2026-10-28T15:31:51Z", "date_only": false, "value": "2026-10-28T15:31:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GJ44-V26Q-V728", "record": "GHSA-GJ44-V26Q-V728", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T15:31:51Z", "date_only": false, "value": "2026-10-28T15:31:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GJ44-V26Q-V728", "record": "GHSA-GJ44-V26Q-V728", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-28T16:20:04.562Z", "date_only": false, "value": "2026-10-28T16:20:04.562026Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myx5rrvswq2p", "record": "CVE-2026-115607", "field": "creation_timestamp", "uuid": "8a18de98-ccd5-48f9-a8ac-3db2dd7cdbf5", "content": "CVE-2026-115607 - dxp toolkit\nThe DXP ToolKit plugin for WordPress (up to version 2.0.1) can be tricked into running unwanted database commands. An attacker could read, change, or delete information\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dxptoolkit #crowdfavorite #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myx5rrvswq2p"}, {"timestamp": "2026-10-28T18:51:27.986Z", "date_only": false, "value": "2026-10-28T18:51:27.986078Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/veduis.bsky.social/post/3myxgaiibla2w", "record": "CVE-2026-115607", "field": "creation_timestamp", "uuid": "2218c539-ab41-4810-8088-dba37e178356", "content": "CVE-2026-115607 is rated CRITICAL for SQL injection via improper neutralization of special elements. The listing also describes an OS command vulnerability. No product or version is named.", "url": "https://bsky.app/profile/veduis.bsky.social/post/3myxgaiibla2w"}, {"timestamp": "2026-10-29T13:43:33.420Z", "date_only": false, "value": "2026-10-29T13:43:33.420610Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-115607", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-29T13:43:33.420Z", "date_only": false, "value": "2026-10-29T13:43:33.420610Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-115607", "record": "FKIE_CVE-2026-115607", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-29T13:47:38.888Z", "date_only": false, "value": "2026-10-29T13:47:38.888Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-115607", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T13:47:38.888Z", "date_only": false, "value": "2026-10-29T13:47:38.888Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-115607", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T14:17:49.143Z", "date_only": false, "value": "2026-10-29T14:17:49.143", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-115607", "record": "FKIE_CVE-2026-115607", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-03T21:31:09.951Z", "anchors": {"origin": {"timestamp": "2026-10-26T12:10:35Z", "date_only": false, "value": "2026-10-26T12:10:35.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-115607", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-26T12:10:35Z", "date_only": false, "value": "2026-10-26T12:10:35.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-115607", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 724834.951089, "hours": 201.34304196916665, "days": 8.389293415381944, "min_seconds": 724834.951089, "max_seconds": 724834.951089, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-26T12:10:35Z", "date_only": false, "value": "2026-10-26T12:10:35.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-115607", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T21:31:09.951Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}