{"metadata": {"vulnerability": "CVE-2026-11905", "count": 15, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-06-10T16:01:48.535Z", "date_only": false, "value": "2026-06-10T16:01:48.535Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-11905", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-10T16:16:58Z", "date_only": false, "value": "2026-06-10T16:16:58.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-11905", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-14T18:17:50Z", "date_only": false, "value": "2026-10-14T18:17:50.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-11905", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-15T06:41:58.987Z", "date_only": false, "value": "2026-10-15T06:41:58.987Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-11905", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T06:41:58.987Z", "date_only": false, "value": "2026-10-15T06:41:58.987Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-11905", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T07:07:45.433Z", "date_only": false, "value": "2026-10-15T07:07:45.433923Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117443661975325039", "record": "CVE-2026-11905", "field": "creation_timestamp", "uuid": "dc5752fd-9664-4ef1-87dc-6292cbabe0ee", "content": "CVE-2026-11905 Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters The Elementor Website Builder \u2013 more than just a page builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.3 via the 'keys_conversion_map' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the full post_content and plaintext post_password of private, draft, pending, and future posts belonging to any author, including Administrators and Editors.\nhttps://www.cve.org/CVERecord?id=CVE-2026-11905https://www.wordfence.com/threat-intel/vulnerabilities/id/4a018a58-2184-4031-99a8-4aad55bcc815?source=cvehttps://plugins.trac.wordpress.org/browser/elementor/tags/4.1.2/modules/wp-rest/classes/post-query.php#L71https://plugins.trac.wordpress.org/browser/elementor/tags/4.1.2/modules/wp-rest/classes/post-query.php#L62https://plugins.trac.wordpress.org/browser/elementor/tags/4.1.2/modules/wp-rest/classes/post-query.php#L108https://plugins.trac.wordpress.org/browser/elementor/tags/4.1.2/modules/wp-rest/base/query.php#L106https://plugins.trac.wordpress.org/browser/elementor/tags/4.0.3/modules/wp-rest/classes/post-query.php#L71https://plugins.trac.wordpress.org/browser/elementor/tags/4.0.3/modules/wp-rest/classes/post-query.php#L62https://plugins.trac.wordpress.org/browser/elementor/tags/4.0.3/modules/wp-rest/classes/post-query.php#L108https://plugins.trac.wordpress.org/browser/elementor/tags/4.0.3/modules/wp-rest/base/query.php#L106https://plugins.trac.wordpress.org/changeset?reponame=&old=3674524%40elementor&new=3674524%40elementor#wordpress #elemntor #ElementorWebsiteBuilder\u2013morethanjustapagebuilder#CVE_2026_11905#bot", "url": "https://infosec.exchange/users/cve/statuses/117443661975325039"}, {"timestamp": "2026-10-15T07:17:58Z", "date_only": false, "value": "2026-10-15T07:17:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PG25-HG39-VR7M", "record": "GHSA-PG25-HG39-VR7M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T07:17:58.980Z", "date_only": false, "value": "2026-10-15T07:17:58.980", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-11905", "record": "FKIE_CVE-2026-11905", "field": "published"}, {"timestamp": "2026-10-15T09:30:33Z", "date_only": false, "value": "2026-10-15T09:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PG25-HG39-VR7M", "record": "GHSA-PG25-HG39-VR7M", "field": "published"}, {"timestamp": "2026-10-15T09:30:33Z", "date_only": false, "value": "2026-10-15T09:30:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PG25-HG39-VR7M", "record": "GHSA-PG25-HG39-VR7M", "field": "modified"}, {"timestamp": "2026-10-15T10:44:25.662Z", "date_only": false, "value": "2026-10-15T10:44:25.662373Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-11905", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T10:44:25.662Z", "date_only": false, "value": "2026-10-15T10:44:25.662373Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-11905", "record": "FKIE_CVE-2026-11905", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T16:43:40.250Z", "date_only": false, "value": "2026-10-15T16:43:40.250Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-11905", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:43:40.250Z", "date_only": false, "value": "2026-10-15T16:43:40.250Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-11905", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T17:17:17.017Z", "date_only": false, "value": "2026-10-15T17:17:17.017", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-11905", "record": "FKIE_CVE-2026-11905", "field": "lastModified"}]}