{"metadata": {"vulnerability": "CVE-2026-7284", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-04-28T08:32:12.353Z", "date_only": false, "value": "2026-04-28T08:32:12.353Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-7284", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-19T13:10:24Z", "date_only": false, "value": "2026-05-19T13:10:24.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-7284", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-05-20T01:25:47.342Z", "date_only": false, "value": "2026-05-20T01:25:47.342Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-7284", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-20T01:25:47.342Z", "date_only": false, "value": "2026-05-20T01:25:47.342Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-7284", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-20T02:16:39Z", "date_only": false, "value": "2026-05-20T02:16:39Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3MMH-P93R-VXVF", "record": "GHSA-3MMH-P93R-VXVF", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-05-20T02:16:39.083Z", "date_only": false, "value": "2026-05-20T02:16:39.083", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-7284", "record": "FKIE_CVE-2026-7284", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-20T03:00:32.745Z", "date_only": false, "value": "2026-05-20T03:00:32.745575Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116604667946550443", "record": "cve-2026-7284", "field": "creation_timestamp", "uuid": "76465339-c830-4144-95ad-32dd731379c3", "content": "\u26a0\ufe0f CVE-2026-7284: CRITICAL vuln in Easy Elements for Elementor (\u22641.4.4) lets unauth'd attackers create admin accounts! Disable user registration & monitor vendor for patches. Full site takeover risk. https://radar.offseq.com/threat/cve-2026-7284-cwe-269-improper-privilege-managemen-ab05905e #OffSeq #WordPress #Vuln #CVE20267284", "url": "https://infosec.exchange/users/offseq/statuses/116604667946550443"}, {"timestamp": "2026-05-20T03:00:36.973Z", "date_only": false, "value": "2026-05-20T03:00:36.973648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmavz62j2w2w", "record": "CVE-2026-7284", "field": "creation_timestamp", "uuid": "e35c6c2d-de5e-4d1b-b5a8-f23a2af816b9", "content": "\ud83d\udd34 CVE-2026-7284 - Critical (9.8)\n\nThe Easy Elements for Elementor \u2013 Addons & Website Templates plugin for WordPress is vulnerable...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7284/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmavz62j2w2w"}, {"timestamp": "2026-05-20T03:00:44.700Z", "date_only": false, "value": "2026-05-20T03:00:44.700977Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmavzwsrks2y", "record": "cve-2026-7284", "field": "creation_timestamp", "uuid": "d2835eb5-11f7-478f-b06d-6b97df6bf08f", "content": "CRITICAL: Easy Elements for Elementor (\u22641.4.4) lets attackers register as admins \u2014 full site takeover possible. Disable user registration now & monitor for a fix. https://radar.offseq.com/threat/cve-2026-7284-cwe-269-improper-privilege-managemen-ab05905e #OffSeq #WordPress #Security", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mmavzwsrks2y"}, {"timestamp": "2026-05-20T03:31:35Z", "date_only": false, "value": "2026-05-20T03:31:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3MMH-P93R-VXVF", "record": "GHSA-3MMH-P93R-VXVF", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-20T03:31:35Z", "date_only": false, "value": "2026-05-20T03:31:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3MMH-P93R-VXVF", "record": "GHSA-3MMH-P93R-VXVF", "field": "modified", "linked_record": true}, {"timestamp": "2026-05-20T05:16:09.736Z", "date_only": false, "value": "2026-05-20T05:16:09.736923Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmb5mfhuef2q", "record": "CVE-2026-7284", "field": "creation_timestamp", "uuid": "4f6ee171-127c-4ec5-a65d-5c43203dfa22", "content": "CVE-2026-7284 - Easy Elements for Elementor\nCVE ID : CVE-2026-7284\n \n Published : May 20, 2026, 2:16 a.m. | 2\u00a0hours, 5\u00a0minutes ago\n \n Description : The Easy Elements for Elementor \u2013 Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via u...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmb5mfhuef2q"}, {"timestamp": "2026-05-20T14:12:23.204Z", "date_only": false, "value": "2026-05-20T14:12:23.204219Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-7284", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-20T14:12:23.204Z", "date_only": false, "value": "2026-05-20T14:12:23.204219Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-7284", "record": "FKIE_CVE-2026-7284", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-05-20T14:12:56.197Z", "date_only": false, "value": "2026-05-20T14:12:56.197Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-7284", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-20T14:12:56.197Z", "date_only": false, "value": "2026-05-20T14:12:56.197Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-7284", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-20T14:32:07.057Z", "date_only": false, "value": "2026-05-20T14:32:07.057157Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmc4oje3mo2s", "record": "CVE-2026-7284", "field": "creation_timestamp", "uuid": "ab634c52-9304-4c81-b5fb-ea89e1362c5b", "content": "CVE-2026-7284 easy-elements (CVSS Score 9.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "url": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmc4oje3mo2s"}, {"timestamp": "2026-06-22T01:46:58.331Z", "date_only": false, "value": "2026-06-22T01:46:58.331310Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motrcpprzu2y", "record": "CVE-2026-7284", "field": "creation_timestamp", "uuid": "a7b67ffb-9490-44b3-92b0-537dc655a502", "content": "\ud83d\udea8  ALERT: CVE-2026-7284\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nThe Easy Elements for Elementor \u2013 Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via user registration in all versions up to, and including, 1.4.4. This is due to the 'easyel_handle_register' function not rest", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motrcpprzu2y"}, {"timestamp": "2026-07-24T08:10:00.150Z", "date_only": false, "value": "2026-07-24T08:10:00.150", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-7284", "record": "FKIE_CVE-2026-7284", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-04T21:52:48.050Z", "anchors": {"origin": {"timestamp": "2026-05-20T01:25:47.342Z", "date_only": false, "value": "2026-05-20T01:25:47.342Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-7284", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-20T01:25:47.342Z", "date_only": false, "value": "2026-05-20T01:25:47.342Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-7284", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 14588820.708329, "hours": 4052.4501967580554, "days": 168.85209153158564, "min_seconds": 14588820.708329, "max_seconds": 14588820.708329, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-20T01:25:47.342Z", "date_only": false, "value": "2026-05-20T01:25:47.342Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-7284", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-04T21:52:48.050Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}