{"metadata": {"vulnerability": "CVE-2026-8778", "count": 19, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-05-17T09:55:22.575Z", "date_only": false, "value": "2026-05-17T09:55:22.575Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-8778", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-02T09:11:56Z", "date_only": false, "value": "2026-06-02T09:11:56.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-8778", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-10T14:37:18Z", "date_only": false, "value": "2026-09-10T14:37:18.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-8778", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-09-11T03:39:37.451Z", "date_only": false, "value": "2026-09-11T03:39:37.451Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8778", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-11T03:39:37.451Z", "date_only": false, "value": "2026-09-11T03:39:37.451Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-8778", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-11T04:18:04Z", "date_only": false, "value": "2026-09-11T04:18:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-93GG-RC58-RPGC", "record": "GHSA-93GG-RC58-RPGC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-11T04:18:04.617Z", "date_only": false, "value": "2026-09-11T04:18:04.617", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8778", "record": "FKIE_CVE-2026-8778", "field": "published"}, {"timestamp": "2026-09-11T04:30:24.421Z", "date_only": false, "value": "2026-09-11T04:30:24.421167Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117250524688517116", "record": "cve-2026-8778", "field": "creation_timestamp", "uuid": "a68f6018-ccfe-45a4-ad72-8095d89634f3", "content": "CVE-2026-8778 (CRITICAL): MIPL Grouped Checkout Fields for WooCommerce \u22641.2.2 suffers from unrestricted file upload due to missing file type validation. Remote code execution possible by unauthenticated attackers. Restrict uploads & monitor! https://radar.offseq.com/threat/cve-2026-8778-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-mulika-mipl-grouped-checkout-a571f695f51796b8 #OffSeq #WordPress #CVE20268778", "url": "https://infosec.exchange/users/offseq/statuses/117250524688517116"}, {"timestamp": "2026-09-11T04:30:27.164Z", "date_only": false, "value": "2026-09-11T04:30:27.164110Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv7q7l5alo2f", "record": "cve-2026-8778", "field": "creation_timestamp", "uuid": "06061966-1ded-4324-a017-fc962dc8e83a", "content": "CVE-2026-8778: MIPL Grouped Checkout Fields for WooCommerce \u22641.2.2 has a CRITICAL file upload flaw. Unauthenticated RCE risk. Restrict file uploads & monitor activity until patch available. https://radar.offseq.com/threat/cve-2026-8778-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-mu...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mv7q7l5alo2f"}, {"timestamp": "2026-09-11T05:41:56.914Z", "date_only": false, "value": "2026-09-11T05:41:56.914305Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7ussmrf3ldcui", "record": "CVE-2026-8778", "field": "creation_timestamp", "uuid": "f14f4a65-dfcd-453c-826b-1e61d8c1d40e", "content": "CVE-2026-8778 - MIPL Grouped Checkout Fields for WooCommerce\nCVE ID : CVE-2026-8778\n \n Published : Sept. 11, 2026, 4:18 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : The MIPL Grouped Checkout Fields for WooCommerce \u2013 Customize & Organize Checkout Fields. plugin for WordPr...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/7ussmrf3ldcui"}, {"timestamp": "2026-09-11T06:00:10.515Z", "date_only": false, "value": "2026-09-11T06:00:10.515502Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv7v7zxqq62p", "record": "CVE-2026-8778", "field": "creation_timestamp", "uuid": "5ce4137d-41c4-4c70-af58-44cf61cbfefc", "content": "CVE-2026-8778 - mipl grouped checkout fields for woocommerce. customize & organize checkout fields.\nThe MIPL Grouped Checkout Fields plugin for WordPress can accept files without checking what they are. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mulika #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mv7v7zxqq62p"}, {"timestamp": "2026-09-11T06:07:07.532Z", "date_only": false, "value": "2026-09-11T06:07:07.532710Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7vmhbowk22", "record": "CVE-2026-8778", "field": "creation_timestamp", "uuid": "0c4c6b3d-8836-427a-90a2-3d5d51bc4d29", "content": "\ud83d\udea8 CVE-2026-8778 \u2014 CVSS 9.8 CRITICAL\n\nThe MIPL Grouped Checkout Fields for WooCommerce \u2013 Customize & Organize Checkout Fields. plugin for WordPre...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-8778\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7vmhbowk22"}, {"timestamp": "2026-09-11T06:31:14Z", "date_only": false, "value": "2026-09-11T06:31:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-93GG-RC58-RPGC", "record": "GHSA-93GG-RC58-RPGC", "field": "published"}, {"timestamp": "2026-09-11T06:31:14Z", "date_only": false, "value": "2026-09-11T06:31:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-93GG-RC58-RPGC", "record": "GHSA-93GG-RC58-RPGC", "field": "modified"}, {"timestamp": "2026-09-11T20:11:19.055Z", "date_only": false, "value": "2026-09-11T20:11:19.055852Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8778", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-11T20:11:19.055Z", "date_only": false, "value": "2026-09-11T20:11:19.055852Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8778", "record": "FKIE_CVE-2026-8778", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-11T20:19:12.419Z", "date_only": false, "value": "2026-09-11T20:19:12.419Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-8778", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-11T20:19:12.419Z", "date_only": false, "value": "2026-09-11T20:19:12.419Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8778", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-11T21:17:58.797Z", "date_only": false, "value": "2026-09-11T21:17:58.797", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8778", "record": "FKIE_CVE-2026-8778", "field": "lastModified"}]}