{"metadata": {"vulnerability": "CVE-2026-85118", "count": 14, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-03T07:58:32.588Z", "date_only": false, "value": "2026-09-03T07:58:32.588Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85118", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-11T06:00:13.999Z", "date_only": false, "value": "2026-10-11T06:00:13.999Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85118", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-11T06:00:13.999Z", "date_only": false, "value": "2026-10-11T06:00:13.999Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-85118", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T06:44:51.747Z", "date_only": false, "value": "2026-10-11T06:44:51.747847Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117420922718947852", "record": "CVE-2026-85118", "field": "creation_timestamp", "uuid": "97df9a52-4777-4727-a08b-25ab62160a84", "content": "CVE-2026-85118 AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update and delete arbitrary WordPress options, which can be used to gain administrator access to the site.\nhttps://www.cve.org/CVERecord?id=CVE-2026-85118https://wpscan.com/vulnerability/ba76e169-6c2a-489e-99df-a1c5d4aef24e/#CVE_2026_85118#bot", "url": "https://infosec.exchange/users/cve/statuses/117420922718947852"}, {"timestamp": "2026-10-11T07:17:25Z", "date_only": false, "value": "2026-10-11T07:17:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RX89-7FW5-QGMG", "record": "GHSA-RX89-7FW5-QGMG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-11T07:17:25.900Z", "date_only": false, "value": "2026-10-11T07:17:25.900", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85118", "record": "FKIE_CVE-2026-85118", "field": "published"}, {"timestamp": "2026-10-11T09:30:25Z", "date_only": false, "value": "2026-10-11T09:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RX89-7FW5-QGMG", "record": "GHSA-RX89-7FW5-QGMG", "field": "published"}, {"timestamp": "2026-10-11T11:24:30.349Z", "date_only": false, "value": "2026-10-11T11:24:30.349790Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85118", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-11T11:24:30.349Z", "date_only": false, "value": "2026-10-11T11:24:30.349790Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85118", "record": "FKIE_CVE-2026-85118", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-11T11:32:44.410Z", "date_only": false, "value": "2026-10-11T11:32:44.410Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85118", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-11T11:32:44.410Z", "date_only": false, "value": "2026-10-11T11:32:44.410Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85118", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T12:31:08Z", "date_only": false, "value": "2026-10-11T12:31:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RX89-7FW5-QGMG", "record": "GHSA-RX89-7FW5-QGMG", "field": "modified"}, {"timestamp": "2026-10-11T12:50:04.658Z", "date_only": false, "value": "2026-10-11T12:50:04.658480Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxm24mwxup2x", "record": "CVE-2026-85118", "field": "creation_timestamp", "uuid": "dc637f6b-82b7-43c4-9c98-3c05bae1435b", "content": "CVE-2026-85118 - ai content generator marketing\nThe AI Content Generator Marketing plugin for WordPress (through version 1.0.0) does not verify who is making certain background requests, so anyone on the internet can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxm24mwxup2x"}, {"timestamp": "2026-10-13T20:36:00.850Z", "date_only": false, "value": "2026-10-13T20:36:00.850", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85118", "record": "FKIE_CVE-2026-85118", "field": "lastModified"}]}