{"metadata": {"vulnerability": "CVE-2026-13440", "count": 16, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-06-26T16:21:22.531Z", "date_only": false, "value": "2026-06-26T16:21:22.531Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-13440", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-04T13:20:31Z", "date_only": false, "value": "2026-07-04T13:20:31.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-13440", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-07-27T23:27:46Z", "date_only": false, "value": "2026-07-27T23:27:46.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-13440", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-07-28T11:32:48.864Z", "date_only": false, "value": "2026-07-28T11:32:48.864Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-13440", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-28T11:32:48.864Z", "date_only": false, "value": "2026-07-28T11:32:48.864Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-13440", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-28T12:16:35Z", "date_only": false, "value": "2026-07-28T12:16:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QMVQ-MP3J-6PVV", "record": "GHSA-QMVQ-MP3J-6PVV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-28T12:16:35.340Z", "date_only": false, "value": "2026-07-28T12:16:35.340", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13440", "record": "FKIE_CVE-2026-13440", "field": "published"}, {"timestamp": "2026-07-28T12:18:03.795Z", "date_only": false, "value": "2026-07-28T12:18:03.795206Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-13440", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-28T12:18:03.795Z", "date_only": false, "value": "2026-07-28T12:18:03.795206Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13440", "record": "FKIE_CVE-2026-13440", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-28T12:19:10.061Z", "date_only": false, "value": "2026-07-28T12:19:10.061Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-13440", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-28T12:19:10.061Z", "date_only": false, "value": "2026-07-28T12:19:10.061Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-13440", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-28T12:31:21Z", "date_only": false, "value": "2026-07-28T12:31:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QMVQ-MP3J-6PVV", "record": "GHSA-QMVQ-MP3J-6PVV", "field": "published"}, {"timestamp": "2026-07-28T12:31:21Z", "date_only": false, "value": "2026-07-28T12:31:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QMVQ-MP3J-6PVV", "record": "GHSA-QMVQ-MP3J-6PVV", "field": "modified"}, {"timestamp": "2026-07-28T14:42:41.152Z", "date_only": false, "value": "2026-07-28T14:42:41.152798Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrpngwmbxe23", "record": "CVE-2026-13440", "field": "creation_timestamp", "uuid": "33417d9c-6866-4238-a4af-0c85b85608d5", "content": "WordPress\u7528StoreGrowth\u30d7\u30e9\u30b0\u30a4\u30f32.1.0\u4ee5\u4e0b\u306bStored XSS\u306e\u8106\u5f31\u6027\u3002\u5165\u529b\u691c\u8a3c\u4e0d\u8db3\u306e\u305f\u3081\u3001\u975e\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u57cb\u3081\u8fbc\u307f\u3001\u30da\u30fc\u30b8\u95b2\u89a7\u30e6\u30fc\u30b6\u30fc\u306b\u5b9f\u884c\u3055\u305b\u308b\u53ef\u80fd\u6027\u2026\nCVE-2026-13440 CVSS 7.2 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mrpngwmbxe23"}, {"timestamp": "2026-07-28T16:07:15.840Z", "date_only": false, "value": "2026-07-28T16:07:15.840", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-13440", "record": "FKIE_CVE-2026-13440", "field": "lastModified"}, {"timestamp": "2026-07-28T17:13:44.566Z", "date_only": false, "value": "2026-07-28T17:13:44.566342Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrpvv2eqdh23", "record": "CVE-2026-13440", "field": "creation_timestamp", "uuid": "832ea322-c735-4738-bf4d-73ad180f5a05", "content": "CVE-2026-13440 - Stored XSS in StoreGrowth WooCommerce. Unauthenticated inject scripts via message_popup. CVSS 7.2. No patch. Remove plugin until update. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-13440/", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrpvv2eqdh23"}]}