{"metadata": {"vulnerability": "CVE-2026-12980", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-06-23T11:27:30.490Z", "date_only": false, "value": "2026-06-23T11:27:30.490Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-12980", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-11T06:00:08.059Z", "date_only": false, "value": "2026-10-11T06:00:08.059Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12980", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-11T06:00:08.059Z", "date_only": false, "value": "2026-10-11T06:00:08.059Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-12980", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T06:32:44.805Z", "date_only": false, "value": "2026-10-11T06:32:44.805906Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117420875077589845", "record": "CVE-2026-12980", "field": "creation_timestamp", "uuid": "b27df44e-2d37-49aa-984c-979886ca5fa8", "content": "CVE-2026-12980 Post Snippets <= 4.2.4 - Contributor+ Stored XSS via Snippet Variable The Post Snippets  WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when the content is viewed.\nhttps://www.cve.org/CVERecord?id=CVE-2026-12980https://wpscan.com/vulnerability/288d419a-9e27-45ae-bde1-1aef52532354/#CVE_2026_12980#bot", "url": "https://infosec.exchange/users/cve/statuses/117420875077589845"}, {"timestamp": "2026-10-11T07:17:23Z", "date_only": false, "value": "2026-10-11T07:17:23Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QQ38-MWRV-H27Q", "record": "GHSA-QQ38-MWRV-H27Q", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-11T07:17:23.890Z", "date_only": false, "value": "2026-10-11T07:17:23.890", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12980", "record": "FKIE_CVE-2026-12980", "field": "published"}, {"timestamp": "2026-10-11T09:30:24Z", "date_only": false, "value": "2026-10-11T09:30:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QQ38-MWRV-H27Q", "record": "GHSA-QQ38-MWRV-H27Q", "field": "published"}, {"timestamp": "2026-10-11T11:31:43.544Z", "date_only": false, "value": "2026-10-11T11:31:43.544442Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12980", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-11T11:31:43.544Z", "date_only": false, "value": "2026-10-11T11:31:43.544442Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12980", "record": "FKIE_CVE-2026-12980", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-11T11:42:54.023Z", "date_only": false, "value": "2026-10-11T11:42:54.023Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-12980", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-11T11:42:54.023Z", "date_only": false, "value": "2026-10-11T11:42:54.023Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12980", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T12:31:07Z", "date_only": false, "value": "2026-10-11T12:31:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QQ38-MWRV-H27Q", "record": "GHSA-QQ38-MWRV-H27Q", "field": "modified"}, {"timestamp": "2026-10-13T20:36:00.850Z", "date_only": false, "value": "2026-10-13T20:36:00.850", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12980", "record": "FKIE_CVE-2026-12980", "field": "lastModified"}]}