{"metadata": {"vulnerability": "CVE-2026-14349", "count": 18, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-14349", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-07-01T16:13:40.244Z", "date_only": false, "value": "2026-07-01T16:13:40.244Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-14349", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-02T05:24:19Z", "date_only": false, "value": "2026-07-02T05:24:19.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-14349", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-09-15T15:09:50Z", "date_only": false, "value": "2026-09-15T15:09:50.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-14349", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-09-16T03:28:17.683Z", "date_only": false, "value": "2026-09-16T03:28:17.683Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-14349", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-16T03:28:17.683Z", "date_only": false, "value": "2026-09-16T03:28:17.683Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-14349", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T04:17:58Z", "date_only": false, "value": "2026-09-16T04:17:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q48R-XVFR-F623", "record": "GHSA-Q48R-XVFR-F623", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-16T04:17:58.777Z", "date_only": false, "value": "2026-09-16T04:17:58.777", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14349", "record": "FKIE_CVE-2026-14349", "field": "published"}, {"timestamp": "2026-09-16T06:00:30.451Z", "date_only": false, "value": "2026-09-16T06:00:30.451673Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvmhl73uec2q", "record": "cve-2026-14349", "field": "creation_timestamp", "uuid": "34d61bc3-cce8-4b98-86a0-b461a1171d5d", "content": "CRITICAL CVE-2026-14349 in TrueBooker (<=1.2.3): Unauthenticated attackers can change any user\u2019s email & reset passwords. Restrict plugin access, monitor for suspicious account changes. https://radar.offseq.com/threat/cve-2026-14349-cwe-862-missing-authorization-in-themetechmount-truebooker-appoi...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvmhl73uec2q"}, {"timestamp": "2026-09-16T06:07:28.977Z", "date_only": false, "value": "2026-09-16T06:07:28.977004Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmhxpusmp2f", "record": "CVE-2026-14349", "field": "creation_timestamp", "uuid": "e7cafc5b-70be-4871-84e7-8a5d8d97e543", "content": "\ud83d\udea8 CVE-2026-14349 \u2014 CVSS 9.8 CRITICAL\n\nThe TrueBooker \u2013 Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorizati...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-14349\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmhxpusmp2f"}, {"timestamp": "2026-09-16T06:31:34Z", "date_only": false, "value": "2026-09-16T06:31:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q48R-XVFR-F623", "record": "GHSA-Q48R-XVFR-F623", "field": "published"}, {"timestamp": "2026-09-16T06:31:34Z", "date_only": false, "value": "2026-09-16T06:31:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q48R-XVFR-F623", "record": "GHSA-Q48R-XVFR-F623", "field": "modified"}, {"timestamp": "2026-09-16T09:00:07.142Z", "date_only": false, "value": "2026-09-16T09:00:07.142100Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmrmfsyv22t", "record": "CVE-2026-14349", "field": "creation_timestamp", "uuid": "e8962f5d-0562-4b5b-a305-85e05d050691", "content": "CVE-2026-14349 - truebooker \u2013 appointment booking and scheduler system\nThe TrueBooker appointment booking plugin for WordPress does not check who is making a request. As a result, even someone without a login\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#themetechmount #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmrmfsyv22t"}, {"timestamp": "2026-09-16T18:56:55.481Z", "date_only": false, "value": "2026-09-16T18:56:55.481301Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14349", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-16T18:56:55.481Z", "date_only": false, "value": "2026-09-16T18:56:55.481301Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14349", "record": "FKIE_CVE-2026-14349", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-16T18:57:03.584Z", "date_only": false, "value": "2026-09-16T18:57:03.584Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-14349", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-16T18:57:03.584Z", "date_only": false, "value": "2026-09-16T18:57:03.584Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-14349", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T19:17:06.020Z", "date_only": false, "value": "2026-09-16T19:17:06.020", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-14349", "record": "FKIE_CVE-2026-14349", "field": "lastModified"}]}