{"metadata": {"vulnerability": "CVE-2026-124763", "count": 11, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 6}, "linked_omitted": 0}, "data": [{"timestamp": "2026-11-09T12:50:51.991Z", "date_only": false, "value": "2026-11-09T12:50:51.991Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-124763", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-13T06:00:08.945Z", "date_only": false, "value": "2026-11-13T06:00:08.945Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124763", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-13T06:00:08.945Z", "date_only": false, "value": "2026-11-13T06:00:08.945Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-124763", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-13T06:14:06.043Z", "date_only": false, "value": "2026-11-13T06:14:06.043865Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117607657997063158", "record": "CVE-2026-124763", "field": "creation_timestamp", "uuid": "32973348-a14c-4b1b-9e82-a12dda857d49", "content": "CVE-2026-124763 AM Wishlist <= 1.1.0 - Unauthenticated Option Overwrite via amwl_upload_file The Woocommerce Wishlist WordPress plugin through 1.1.0 does not have authorisation and CSRF checks in one of its unauthenticated AJAX actions, allowing unauthenticated users to overwrite any site option with the URL of an uploaded image or an empty value, breaking the site (for example by changing its URL or active , or deactivating every Woocommerce Wishlist WordPress plugin through 1.1.0).\nhttps://www.cve.org/CVERecord?id=CVE-2026-124763https://wpscan.com/vulnerability/557b9f2b-4673-4efb-b7a5-f68c0b2222ac/#CVE_2026_124763#bot", "url": "https://infosec.exchange/users/cve/statuses/117607657997063158"}, {"timestamp": "2026-11-13T06:16:53Z", "date_only": false, "value": "2026-11-13T06:16:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9C3X-HC2H-94XP", "record": "GHSA-9C3X-HC2H-94XP", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-13T06:31:44Z", "date_only": false, "value": "2026-11-13T06:31:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9C3X-HC2H-94XP", "record": "GHSA-9C3X-HC2H-94XP", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-13T18:49:09.043Z", "date_only": false, "value": "2026-11-13T18:49:09.043141Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-124763", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-11-13T18:52:29.051Z", "date_only": false, "value": "2026-11-13T18:52:29.051Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-124763", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-13T18:52:29.051Z", "date_only": false, "value": "2026-11-13T18:52:29.051Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-124763", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-13T19:40:13.535Z", "date_only": false, "value": "2026-11-13T19:40:13.535261Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n27qg4b37l2z", "record": "CVE-2026-124763", "field": "creation_timestamp", "uuid": "4b1a73ca-e5e1-4051-b875-60eda66d0116", "content": "CVE-2026-124763 - woocommerce wishlist\nThe WooCommerce Wishlist add\u2011on for WordPress (versions up to 1.1.0) lets anyone on the internet send a request that can replace any configuration setting\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#woocommercewishlist #unknown #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n27qg4b37l2z"}, {"timestamp": "2026-11-13T21:31:53Z", "date_only": false, "value": "2026-11-13T21:31:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9C3X-HC2H-94XP", "record": "GHSA-9C3X-HC2H-94XP", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T23:25:28.936Z", "anchors": {"origin": {"timestamp": "2026-11-13T06:00:08.945Z", "date_only": false, "value": "2026-11-13T06:00:08.945Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124763", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-13T06:00:08.945Z", "date_only": false, "value": "2026-11-13T06:00:08.945Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124763", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 62719.991859, "hours": 17.422219960833335, "days": 0.7259258317013889, "min_seconds": 62719.991859, "max_seconds": 62719.991859, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-13T06:00:08.945Z", "date_only": false, "value": "2026-11-13T06:00:08.945Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124763", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T23:25:28.936Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}