{"metadata": {"vulnerability": "CVE-2026-84737", "count": 14, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-02T08:35:33.361Z", "date_only": false, "value": "2026-09-02T08:35:33.361Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-84737", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-11T06:00:13.835Z", "date_only": false, "value": "2026-10-11T06:00:13.835Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-84737", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-11T06:00:13.835Z", "date_only": false, "value": "2026-10-11T06:00:13.835Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-84737", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T06:44:11.475Z", "date_only": false, "value": "2026-10-11T06:44:11.475666Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117420920075836127", "record": "CVE-2026-84737", "field": "creation_timestamp", "uuid": "cc6388f5-66f8-4245-98c2-283fbb756f2d", "content": "CVE-2026-84737 Freeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter The Freeton WP WordPress plugin through 1.0.0 does not correctly validate the activation code when authenticating a user, allowing unauthenticated attackers to log in as any user whose email address they know, including administrators.\nhttps://www.cve.org/CVERecord?id=CVE-2026-84737https://wpscan.com/vulnerability/b26e6b42-0c9f-4b6b-ac2c-2e452038288b/#CVE_2026_84737#bot", "url": "https://infosec.exchange/users/cve/statuses/117420920075836127"}, {"timestamp": "2026-10-11T07:17:25Z", "date_only": false, "value": "2026-10-11T07:17:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-82JR-XJ5X-XPJ4", "record": "GHSA-82JR-XJ5X-XPJ4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-11T07:17:25.797Z", "date_only": false, "value": "2026-10-11T07:17:25.797", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84737", "record": "FKIE_CVE-2026-84737", "field": "published"}, {"timestamp": "2026-10-11T09:30:25Z", "date_only": false, "value": "2026-10-11T09:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-82JR-XJ5X-XPJ4", "record": "GHSA-82JR-XJ5X-XPJ4", "field": "published"}, {"timestamp": "2026-10-11T11:24:47.065Z", "date_only": false, "value": "2026-10-11T11:24:47.065502Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-84737", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-11T11:24:47.065Z", "date_only": false, "value": "2026-10-11T11:24:47.065502Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84737", "record": "FKIE_CVE-2026-84737", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-11T11:32:44.539Z", "date_only": false, "value": "2026-10-11T11:32:44.539Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-84737", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-11T11:32:44.539Z", "date_only": false, "value": "2026-10-11T11:32:44.539Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-84737", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T12:31:08Z", "date_only": false, "value": "2026-10-11T12:31:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-82JR-XJ5X-XPJ4", "record": "GHSA-82JR-XJ5X-XPJ4", "field": "modified"}, {"timestamp": "2026-10-11T12:40:05.366Z", "date_only": false, "value": "2026-10-11T12:40:05.366517Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlzkrklbw2x", "record": "CVE-2026-84737", "field": "creation_timestamp", "uuid": "c1deedda-a857-443a-bf6e-4b783adfc409", "content": "CVE-2026-84737 - freeton wp\nThe Freeton WP WordPress plugin (up to version 1.0.0) does not properly check the activation code during login. This allows anyone who knows a user's email address to sign in as\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freetonwp #unknown #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlzkrklbw2x"}, {"timestamp": "2026-10-13T20:36:00.850Z", "date_only": false, "value": "2026-10-13T20:36:00.850", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84737", "record": "FKIE_CVE-2026-84737", "field": "lastModified"}]}