{"metadata": {"vulnerability": "CVE-2026-18467", "count": 23, "kinds": {"milestone": 4, "sighting": 10, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-07-31T08:28:18.576Z", "date_only": false, "value": "2026-07-31T08:28:18.576Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-18467", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-23T13:14:06Z", "date_only": false, "value": "2026-09-23T13:14:06.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-18467", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-24T01:27:57.343Z", "date_only": false, "value": "2026-09-24T01:27:57.343Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-18467", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-24T01:27:57.343Z", "date_only": false, "value": "2026-09-24T01:27:57.343Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-18467", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T02:10:05.232Z", "date_only": false, "value": "2026-09-24T02:10:05.232991Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa6glhb6q2n", "record": "CVE-2026-18467", "field": "creation_timestamp", "uuid": "768a8adb-74c9-4a70-87f3-ee132ae31f82", "content": "CVE-2026-18467 - paytium: mollie payment forms & donations\nThe Paytium Mollie payment forms and donations plugin for WordPress can be tricked into giving a new user full administrator rights. An attacker can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#paytiumsupport #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa6glhb6q2n"}, {"timestamp": "2026-09-24T02:16:52Z", "date_only": false, "value": "2026-09-24T02:16:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PJHR-J4C6-9F6G", "record": "GHSA-PJHR-J4C6-9F6G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-24T02:16:52.943Z", "date_only": false, "value": "2026-09-24T02:16:52.943", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18467", "record": "FKIE_CVE-2026-18467", "field": "published"}, {"timestamp": "2026-09-24T03:00:26.600Z", "date_only": false, "value": "2026-09-24T03:00:26.600128Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117323780970692075", "record": "cve-2026-18467", "field": "creation_timestamp", "uuid": "1c4c67de-2f65-4324-a46c-4f9a302276a8", "content": "CVE-2026-18467: CRITICAL privilege escalation in Paytium: Mollie payment forms (\u22645.0.3). Unauthenticated users can create admin accounts via exploited payment forms. Restrict forms or disable plugin until full fix. https://radar.offseq.com/threat/cve-2026-18467-cwe-269-improper-privilege-management-in-paytiumsupport-paytium-mollie-payment-forms-816d892a2e04a4c5 #OffSeq #WordPress #CVE202618467 #Security", "url": "https://infosec.exchange/users/offseq/statuses/117323780970692075"}, {"timestamp": "2026-09-24T03:00:29.036Z", "date_only": false, "value": "2026-09-24T03:00:29.036577Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwabaoecgs2m", "record": "cve-2026-18467", "field": "creation_timestamp", "uuid": "044d4c73-13da-471b-8c97-856dfdb4275b", "content": "CRITICAL: Paytium: Mollie plugin (\u22645.0.3) lets unauthenticated attackers create admin accounts via exposed payment forms. Restrict access or disable plugin until a full fix ships. https://radar.offseq.com/threat/cve-2026-18467-cwe-269-improper-privilege-management-in-paytiumsupport-paytium-mollie...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwabaoecgs2m"}, {"timestamp": "2026-09-24T03:30:27Z", "date_only": false, "value": "2026-09-24T03:30:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PJHR-J4C6-9F6G", "record": "GHSA-PJHR-J4C6-9F6G", "field": "published"}, {"timestamp": "2026-09-24T03:30:27Z", "date_only": false, "value": "2026-09-24T03:30:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PJHR-J4C6-9F6G", "record": "GHSA-PJHR-J4C6-9F6G", "field": "modified"}, {"timestamp": "2026-09-24T04:07:17.976Z", "date_only": false, "value": "2026-09-24T04:07:17.976517Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwaey6nrwi2f", "record": "CVE-2026-18467", "field": "creation_timestamp", "uuid": "6f07d823-ef54-4f05-b570-ae238fe29714", "content": "\ud83d\udea8 CVE-2026-18467 \u2014 CVSS 9.8 CRITICAL\n\nThe Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-18467\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwaey6nrwi2f"}, {"timestamp": "2026-09-24T05:02:26.600Z", "date_only": false, "value": "2026-09-24T05:02:26.600139Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2rpi2c2q", "record": "CVE-2026-18467", "field": "creation_timestamp", "uuid": "c20fb153-35da-46eb-98d4-6f7e2bc46321", "content": "Daily IT Security Digest \u2014 2026-09-24\nPaytium WordPress Plugin Privilege Escalation (CVE-2026-18467)\nCVSS 9.8 critical privilege escalation in the Paytium: Mollie payment forms and donations WordPress plugin. Unauthenticated attackers can exploit compromised payment forms to create admin accounts,", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2rpi2c2q"}, {"timestamp": "2026-09-24T05:02:27.096Z", "date_only": false, "value": "2026-09-24T05:02:27.096102Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2rxwgg2a", "record": "CVE-2026-18467", "field": "creation_timestamp", "uuid": "f922947e-0dbe-457a-8b0f-20238007de62", "content": "Daily IT Security Digest \u2014 2026-09-24\nfull control over WordPress installations. Operators of sites using this plugin should restrict form access or disable it until a full patch is available.\nhttps://stemshop.top/cve/CVE-2026-18467\n\n## 5. Actively Exploited Cisco ISE Auth Bypass (CVE-2026-76460)\nA", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2rxwgg2a"}, {"timestamp": "2026-09-24T07:48:23.735Z", "date_only": false, "value": "2026-09-24T07:48:23.735894Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwardixuua2c", "record": "CVE-2026-18467", "field": "creation_timestamp", "uuid": "ad030e52-8ddf-45fd-a205-9b54b4b2043b", "content": "\ud83d\udd34 CVE-2026-18467 - Critical (9.8)\n\nThe Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Esc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18467/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwardixuua2c"}, {"timestamp": "2026-09-24T08:00:32Z", "date_only": false, "value": "2026-09-24T08:00:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/92fa30b776164d4fd0064893c85d488e", "record": "CVE-2026-18467", "field": "creation_timestamp", "uuid": "70b69b1b-e108-4a4f-8c77-54ec2367e647", "content": "This cyber threat intelligence digest highlights three key updates:\n\n\u2022 **AI-Assisted EDR Bypass:** Researchers demonstrated using an uncensored local AI model (Qwen 3.8 27B) to develop an LSASS dumper that evades endpoint detection and response systems.  \n\u2022 **Industry Hiring:** AIKOCorp, a cybersecurity and AI research lab, is seeking a remote Full-stack Engineer with expertise in Go, React, TypeScript, and cloud observability infrastructure.  \n\u2022 **Critical WordPress Vulnerability:** CVE-2026-18467 (CVSS 9.8) affects Paytium \u22645.0.3, allowing unauthenticated privilege escalation to admin via an unchecked form parameter, enabling full site takeover.", "url": "https://gist.github.com/ichintu/92fa30b776164d4fd0064893c85d488e"}, {"timestamp": "2026-09-24T14:38:06.322Z", "date_only": false, "value": "2026-09-24T14:38:06.322433Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18467", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-24T14:38:06.322Z", "date_only": false, "value": "2026-09-24T14:38:06.322433Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18467", "record": "FKIE_CVE-2026-18467", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-24T15:04:13.676Z", "date_only": false, "value": "2026-09-24T15:04:13.676Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-18467", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-24T15:04:13.676Z", "date_only": false, "value": "2026-09-24T15:04:13.676Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-18467", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T16:17:07.393Z", "date_only": false, "value": "2026-09-24T16:17:07.393", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-18467", "record": "FKIE_CVE-2026-18467", "field": "lastModified"}, {"timestamp": "2026-09-26T05:01:56.955Z", "date_only": false, "value": "2026-09-26T05:01:56.955929Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixqplan2l", "record": "CVE-2026-18467", "field": "creation_timestamp", "uuid": "6b3d5bcc-f93a-4dfd-9f84-c0273574775e", "content": "Daily IT Security Digest \u2014 2026-09-26\nraising serious counterintelligence and security concerns. The breach is under investigation. [Source](https://infosec.exchange/@DevaOnBreaches/117334517240273125)\n\n6. **Paytium WordPress Plugin \u2014 Critical Privilege Escalation (CVE-2026-18467)**\n   A critical", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixqplan2l"}, {"timestamp": "2026-09-26T05:01:57.552Z", "date_only": false, "value": "2026-09-26T05:01:57.552299Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixraw2p25", "record": "cve-2026-18467", "field": "creation_timestamp", "uuid": "95e58eda-6217-445c-8f57-d6151c111d77", "content": "Daily IT Security Digest \u2014 2026-09-26\napplied. [Source](https://radar.offseq.com/threat/cve-2026-18467-paytium)\n\n7. **OpenClaw Security Suite \u2014 Multiple Vulnerabilities Patched**\n   OpenClaw released multiple fixes addressing several security issues: CVE-2026-100575 (HIGH, missing authorization in", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixraw2p25"}]}