{"metadata": {"vulnerability": "CVE-2026-15335", "count": 19, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-07-09T19:26:57.609Z", "date_only": false, "value": "2026-07-09T19:26:57.609Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-15335", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-09T19:42:12Z", "date_only": false, "value": "2026-07-09T19:42:12.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-15335", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-15335", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-07-11T03:44:24.811Z", "date_only": false, "value": "2026-07-11T03:44:24.811Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15335", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-11T03:44:24.811Z", "date_only": false, "value": "2026-07-11T03:44:24.811Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-15335", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-11T05:16:32Z", "date_only": false, "value": "2026-07-11T05:16:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3H3P-33F5-225R", "record": "GHSA-3H3P-33F5-225R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-11T05:16:32.923Z", "date_only": false, "value": "2026-07-11T05:16:32.923", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15335", "record": "FKIE_CVE-2026-15335", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-11T05:28:05.446Z", "date_only": false, "value": "2026-07-11T05:28:05.446850Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdwjlzgat2z", "record": "CVE-2026-15335", "field": "creation_timestamp", "uuid": "eb00fe78-07d2-45b9-bb26-e9365fe20b3d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15335 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Booking Package \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7E706410-82B5-448B-9694-735374C3F150", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdwjlzgat2z"}, {"timestamp": "2026-07-11T05:28:05.972Z", "date_only": false, "value": "2026-07-11T05:28:05.972142Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqdwjlybsl2g", "record": "CVE-2026-15335", "field": "creation_timestamp", "uuid": "205da63e-2f6e-4faf-b9d6-535e14f02117", "content": "WordPress\u63d2\u4ef6Booking Package\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e(CVE-2026-15335)\u6df1\u5ea6\u5206\u6790\u4e0e\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/B944EB58-42F0-47B5-814F-696644E968AD", "url": "https://bsky.app/profile/qiancx.bsky.social/post/3mqdwjlybsl2g"}, {"timestamp": "2026-07-11T06:31:16Z", "date_only": false, "value": "2026-07-11T06:31:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3H3P-33F5-225R", "record": "GHSA-3H3P-33F5-225R", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-11T06:31:16Z", "date_only": false, "value": "2026-07-11T06:31:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3H3P-33F5-225R", "record": "GHSA-3H3P-33F5-225R", "field": "modified"}, {"timestamp": "2026-07-11T11:00:43.136Z", "date_only": false, "value": "2026-07-11T11:00:43.136110Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqej4eoju22b", "record": "CVE-2026-15335", "field": "creation_timestamp", "uuid": "3a2fdfb2-530a-4e41-82ee-69cddcaef9e4", "content": "\ud83d\udfe0 CVE-2026-15335 - High (7.5)\n\nThe Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15335/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqej4eoju22b"}, {"timestamp": "2026-07-12T05:03:47.746Z", "date_only": false, "value": "2026-07-12T05:03:47.746011Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqgfn34hjw2v", "record": "CVE-2026-15335", "field": "creation_timestamp", "uuid": "bf2c1591-dfb2-43f4-aba0-09c4e17affd8", "content": "CVE-2026-15335 - SQLi in Booking Package for WordPress. Unauthenticated attackers can extract sensitive DB info. CVSS 7.5. No patch available. Disable or replace immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-15335/", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqgfn34hjw2v"}, {"timestamp": "2026-07-13T00:00:23.980Z", "date_only": false, "value": "2026-07-13T00:00:23.980063Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mqif5dd4ev2d", "record": "CVE-2026-15335", "field": "creation_timestamp", "uuid": "6977545a-6766-41c9-b9a6-1fd6f7795faa", "content": "CVE-2026-15335. CVSS 7.5. Booking Package plugin leaks your entire database to unauthenticated visitors via SQL injection. No auth required. Update to 1.7.20 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #SQLi #CyberSecurity", "url": "https://bsky.app/profile/pulse-wp.com/post/3mqif5dd4ev2d"}, {"timestamp": "2026-07-14T14:24:34.876Z", "date_only": false, "value": "2026-07-14T14:24:34.876800Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15335", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-14T14:24:34.876Z", "date_only": false, "value": "2026-07-14T14:24:34.876800Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15335", "record": "FKIE_CVE-2026-15335", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-14T14:24:49.343Z", "date_only": false, "value": "2026-07-14T14:24:49.343Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-15335", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-14T14:24:49.343Z", "date_only": false, "value": "2026-07-14T14:24:49.343Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-15335", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-14T15:16:57.703Z", "date_only": false, "value": "2026-07-14T15:16:57.703", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15335", "record": "FKIE_CVE-2026-15335", "field": "lastModified"}], "metrics": {"as_of": "2026-10-28T10:14:34.178Z", "anchors": {"origin": {"timestamp": "2026-07-11T03:44:24.811Z", "date_only": false, "value": "2026-07-11T03:44:24.811Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15335", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-11T03:44:24.811Z", "date_only": false, "value": "2026-07-11T03:44:24.811Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15335", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 9441009.367467, "hours": 2622.5026020741666, "days": 109.27094175309027, "min_seconds": 9441009.367467, "max_seconds": 9441009.367467, "approximate": false, "ongoing": true, "order_known": true, "end_before_start": false, "start": {"timestamp": "2026-07-11T03:44:24.811Z", "date_only": false, "value": "2026-07-11T03:44:24.811Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15335", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T10:14:34.178Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}