{"metadata": {"vulnerability": "CVE-2026-4259", "count": 14, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-03-16T10:30:53.657Z", "date_only": false, "value": "2026-03-16T10:30:53.657Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-4259", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-22T06:00:01.904Z", "date_only": false, "value": "2026-06-22T06:00:01.904Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-4259", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-22T06:00:01.904Z", "date_only": false, "value": "2026-06-22T06:00:01.904Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-4259", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-22T06:16:21Z", "date_only": false, "value": "2026-06-22T06:16:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G944-P6HC-2MCH", "record": "GHSA-G944-P6HC-2MCH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-22T06:16:21.153Z", "date_only": false, "value": "2026-06-22T06:16:21.153", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4259", "record": "FKIE_CVE-2026-4259", "field": "published"}, {"timestamp": "2026-06-22T07:50:07.470Z", "date_only": false, "value": "2026-06-22T07:50:07.470324Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moufm3ars72a", "record": "CVE-2026-4259", "field": "creation_timestamp", "uuid": "ccbcbdf6-c18e-432d-86d6-80d3441f39f8", "content": "CVE-2026-4259 - Ultimate WooCommerce Auction Pro\nCVE ID : CVE-2026-4259\n \n Published : June 22, 2026, 6 a.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : The ultimate-woocommerce-auction-pro WordPress plugin through 2.4.5 does not sanitise and escape a parameter before outputting...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3moufm3ars72a"}, {"timestamp": "2026-06-22T09:30:45Z", "date_only": false, "value": "2026-06-22T09:30:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G944-P6HC-2MCH", "record": "GHSA-G944-P6HC-2MCH", "field": "published"}, {"timestamp": "2026-06-22T12:55:00.553Z", "date_only": false, "value": "2026-06-22T12:55:00.553860Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-4259", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-06-22T12:55:00.553Z", "date_only": false, "value": "2026-06-22T12:55:00.553860Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4259", "record": "FKIE_CVE-2026-4259", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-22T12:55:31.944Z", "date_only": false, "value": "2026-06-22T12:55:31.944Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-4259", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-22T12:55:31.944Z", "date_only": false, "value": "2026-06-22T12:55:31.944Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-4259", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-22T15:30:42Z", "date_only": false, "value": "2026-06-22T15:30:42Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G944-P6HC-2MCH", "record": "GHSA-G944-P6HC-2MCH", "field": "modified"}, {"timestamp": "2026-06-22T18:38:02.507Z", "date_only": false, "value": "2026-06-22T18:38:02.507", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4259", "record": "FKIE_CVE-2026-4259", "field": "lastModified"}, {"timestamp": "2026-08-21T23:00:11.470Z", "date_only": false, "value": "2026-08-21T23:00:11.470973Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/1569", "record": "CVE-2026-4259", "field": "creation_timestamp", "uuid": "3ea1625a-913e-4e69-afac-c1ab362680eb", "content": "\ud83d\udd34 CVE-2026-4259: XSS Flaw Discovered in Ultimate WooCommerce Auction Pro Plugin\n\nA new vulnerability, CVE-2026-4259, has been disclosed in the Ultimate WooCommerce Auction Pro WordPress plugin affecting versions 2.4.5 and earlier. The flaw is a reflected cross-site scripting (XSS) vulnerability caused by improper sanitization and escaping of user-supplied input in the uwa_manage_auctions functionality.\n\nSuccessful exploitation could allow attackers to execute malicious scripts in the browsers of high-privilege users, including WordPress administrators, potentially leading to account compromise and unauthorized actions within affected sites.", "url": "https://t.me/pphm_HackerNews/1569"}]}