{"metadata": {"vulnerability": "CVE-2026-16985", "count": 14, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-07-24T08:43:45.499Z", "date_only": false, "value": "2026-07-24T08:43:45.499Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-16985", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-10T06:00:16.136Z", "date_only": false, "value": "2026-08-10T06:00:16.136Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16985", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-10T06:00:16.136Z", "date_only": false, "value": "2026-08-10T06:00:16.136Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-16985", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-10T07:16:48Z", "date_only": false, "value": "2026-08-10T07:16:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FWRM-W2W9-JM5F", "record": "GHSA-FWRM-W2W9-JM5F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-10T07:16:48.380Z", "date_only": false, "value": "2026-08-10T07:16:48.380", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16985", "record": "FKIE_CVE-2026-16985", "field": "published"}, {"timestamp": "2026-08-10T09:00:25.483Z", "date_only": false, "value": "2026-08-10T09:00:25.483777Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117070392510526892", "record": "cve-2026-16985", "field": "creation_timestamp", "uuid": "7d5a555c-d5be-4a25-9feb-70830299b3f8", "content": "CVE-2026-16985: Squeeze WP plugin <1.7.12 has a CRITICAL vuln \u2014 users with upload_files can upload PHP files, enabling remote code execution. Restrict permissions, monitor uploads, and check for updates. https://radar.offseq.com/threat/cve-2026-16985-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-squeeze-a1de64d348b6591f #OffSeq #WordPress #CVE2026_16985 #infosec", "url": "https://infosec.exchange/users/offseq/statuses/117070392510526892"}, {"timestamp": "2026-08-10T09:00:27.743Z", "date_only": false, "value": "2026-08-10T09:00:27.743268Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mspqewvccx2n", "record": "cve-2026-16985", "field": "creation_timestamp", "uuid": "ac0c69ef-39c1-472d-911c-86544c96ba1f", "content": "Squeeze WP plugin pre-1.7.12: CRITICAL vuln allows PHP file uploads by users with upload_files rights \u2014 risk of remote code exec. Limit permissions & monitor uploads now. https://radar.offseq.com/threat/cve-2026-16985-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-squeeze-a1de64d348b6...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mspqewvccx2n"}, {"timestamp": "2026-08-10T09:31:21Z", "date_only": false, "value": "2026-08-10T09:31:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FWRM-W2W9-JM5F", "record": "GHSA-FWRM-W2W9-JM5F", "field": "published"}, {"timestamp": "2026-08-11T20:39:52.829Z", "date_only": false, "value": "2026-08-11T20:39:52.829777Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-16985", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-08-11T20:39:52.829Z", "date_only": false, "value": "2026-08-11T20:39:52.829777Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16985", "record": "FKIE_CVE-2026-16985", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-11T20:40:16.859Z", "date_only": false, "value": "2026-08-11T20:40:16.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-16985", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-11T20:40:16.859Z", "date_only": false, "value": "2026-08-11T20:40:16.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-16985", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-11T21:32:30Z", "date_only": false, "value": "2026-08-11T21:32:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FWRM-W2W9-JM5F", "record": "GHSA-FWRM-W2W9-JM5F", "field": "modified"}, {"timestamp": "2026-08-26T16:31:16.753Z", "date_only": false, "value": "2026-08-26T16:31:16.753", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16985", "record": "FKIE_CVE-2026-16985", "field": "lastModified"}]}