{"metadata": {"vulnerability": "CVE-2026-8157", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-05-08T09:14:33.992Z", "date_only": false, "value": "2026-05-08T09:14:33.992Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-8157", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-22T06:00:02.475Z", "date_only": false, "value": "2026-06-22T06:00:02.475Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8157", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-22T06:00:02.475Z", "date_only": false, "value": "2026-06-22T06:00:02.475Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-8157", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-22T06:16:29Z", "date_only": false, "value": "2026-06-22T06:16:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HQ2M-9P82-5366", "record": "GHSA-HQ2M-9P82-5366", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-22T06:16:29Z", "date_only": false, "value": "2026-06-22T06:16:29.000", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8157", "record": "FKIE_CVE-2026-8157", "field": "published"}, {"timestamp": "2026-06-22T07:30:35.025Z", "date_only": false, "value": "2026-06-22T07:30:35.025842Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mouej4ydjs2l", "record": "cve-2026-8157", "field": "creation_timestamp", "uuid": "d5989e94-63c4-4be6-b8db-574531e2f345", "content": "Vitepos <3.4.2 HIGH severity vuln (CVE-2026-8157): Auth users with custom roles can escalate to admin via REST API. Restrict endpoint access & watch for vendor updates. https://radar.offseq.com/threat/cve-2026-8157-cwe-269-improper-privilege-managemen-ad086b248eb210ce #OffSeq #WordPress #Security", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mouej4ydjs2l"}, {"timestamp": "2026-06-22T07:30:35.542Z", "date_only": false, "value": "2026-06-22T07:30:35.542089Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116792585922539614", "record": "cve-2026-8157", "field": "creation_timestamp", "uuid": "3c2472b2-bfcb-487e-a8d8-afa38af38723", "content": "Vitepos WordPress plugin <3.4.2 has a HIGH severity privilege escalation vuln (CVE-2026-8157). Auth users with custom Vitepos roles can become admins via REST API. Restrict API access & monitor for patches. https://radar.offseq.com/threat/cve-2026-8157-cwe-269-improper-privilege-managemen-ad086b248eb210ce #OffSeq #WordPress #CVE20268157 #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/116792585922539614"}, {"timestamp": "2026-06-22T08:14:26.442Z", "date_only": false, "value": "2026-06-22T08:14:26.442137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mougxkmsvw2y", "record": "CVE-2026-8157", "field": "creation_timestamp", "uuid": "f38d98af-f8f4-4f79-a4a8-e59cf0955047", "content": "CVE-2026-8157 - Vitepos\nCVE ID : CVE-2026-8157\n \n Published : June 22, 2026, 6 a.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : The Vitepos WordPress plugin before 3.4.2 does not properly restrict the roles that can be assigned when creating new users via one of its REST API end...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mougxkmsvw2y"}, {"timestamp": "2026-06-22T09:30:45Z", "date_only": false, "value": "2026-06-22T09:30:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HQ2M-9P82-5366", "record": "GHSA-HQ2M-9P82-5366", "field": "published"}, {"timestamp": "2026-06-22T12:48:43.789Z", "date_only": false, "value": "2026-06-22T12:48:43.789264Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8157", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-06-22T12:48:43.789Z", "date_only": false, "value": "2026-06-22T12:48:43.789264Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8157", "record": "FKIE_CVE-2026-8157", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-22T12:48:54.354Z", "date_only": false, "value": "2026-06-22T12:48:54.354Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-8157", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-22T12:48:54.354Z", "date_only": false, "value": "2026-06-22T12:48:54.354Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8157", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-22T15:30:42Z", "date_only": false, "value": "2026-06-22T15:30:42Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HQ2M-9P82-5366", "record": "GHSA-HQ2M-9P82-5366", "field": "modified"}, {"timestamp": "2026-06-22T18:38:02.507Z", "date_only": false, "value": "2026-06-22T18:38:02.507", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8157", "record": "FKIE_CVE-2026-8157", "field": "lastModified"}]}