{"metadata": {"vulnerability": "CVE-2026-84167", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-01T08:14:44.207Z", "date_only": false, "value": "2026-09-01T08:14:44.207Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-84167", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T06:00:08.260Z", "date_only": false, "value": "2026-10-12T06:00:08.260Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-84167", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T06:00:08.260Z", "date_only": false, "value": "2026-10-12T06:00:08.260Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-84167", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T06:06:22.564Z", "date_only": false, "value": "2026-10-12T06:06:22.564631Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117426433690540384", "record": "CVE-2026-84167", "field": "creation_timestamp", "uuid": "c37b2799-4244-40f1-adb8-9229a81e9b03", "content": "CVE-2026-84167 Hotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDOR The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it, allowing any authenticated user such as a Subscriber to read other customers' booking details, including their name, email address, phone number and postal address, by referencing an identifier they do not own.\nhttps://www.cve.org/CVERecord?id=CVE-2026-84167https://wpscan.com/vulnerability/77073fed-5f88-4fc5-82ea-7f588483961a/#CVE_2026_84167#bot", "url": "https://infosec.exchange/users/cve/statuses/117426433690540384"}, {"timestamp": "2026-10-12T06:17:00Z", "date_only": false, "value": "2026-10-12T06:17:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M5MM-2642-H6GV", "record": "GHSA-M5MM-2642-H6GV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T06:17:00.420Z", "date_only": false, "value": "2026-10-12T06:17:00.420", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84167", "record": "FKIE_CVE-2026-84167", "field": "published"}, {"timestamp": "2026-10-12T06:31:17Z", "date_only": false, "value": "2026-10-12T06:31:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M5MM-2642-H6GV", "record": "GHSA-M5MM-2642-H6GV", "field": "published"}, {"timestamp": "2026-10-12T11:37:42.472Z", "date_only": false, "value": "2026-10-12T11:37:42.472906Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-84167", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-12T11:37:42.472Z", "date_only": false, "value": "2026-10-12T11:37:42.472906Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84167", "record": "FKIE_CVE-2026-84167", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-12T11:37:45.477Z", "date_only": false, "value": "2026-10-12T11:37:45.477Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-84167", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-12T11:37:45.477Z", "date_only": false, "value": "2026-10-12T11:37:45.477Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-84167", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T12:30:26Z", "date_only": false, "value": "2026-10-12T12:30:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M5MM-2642-H6GV", "record": "GHSA-M5MM-2642-H6GV", "field": "modified"}, {"timestamp": "2026-10-13T16:29:21.907Z", "date_only": false, "value": "2026-10-13T16:29:21.907", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84167", "record": "FKIE_CVE-2026-84167", "field": "lastModified"}]}