{"metadata": {"vulnerability": "CVE-2026-9231", "count": 16, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-05-21T18:37:05.008Z", "date_only": false, "value": "2026-05-21T18:37:05.008Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-9231", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-21T18:52:15Z", "date_only": false, "value": "2026-05-21T18:52:15.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-9231", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-21T19:51:45Z", "date_only": false, "value": "2026-09-21T19:51:45.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-9231", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-09-22T08:27:18.343Z", "date_only": false, "value": "2026-09-22T08:27:18.343Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-9231", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-22T08:27:18.343Z", "date_only": false, "value": "2026-09-22T08:27:18.343Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-9231", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-22T09:17:06Z", "date_only": false, "value": "2026-09-22T09:17:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VQ82-HCFX-MF57", "record": "GHSA-VQ82-HCFX-MF57", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-22T09:17:06.353Z", "date_only": false, "value": "2026-09-22T09:17:06.353", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9231", "record": "FKIE_CVE-2026-9231", "field": "published"}, {"timestamp": "2026-09-22T09:31:14Z", "date_only": false, "value": "2026-09-22T09:31:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VQ82-HCFX-MF57", "record": "GHSA-VQ82-HCFX-MF57", "field": "published"}, {"timestamp": "2026-09-22T09:31:14Z", "date_only": false, "value": "2026-09-22T09:31:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VQ82-HCFX-MF57", "record": "GHSA-VQ82-HCFX-MF57", "field": "modified"}, {"timestamp": "2026-09-22T10:07:43.995Z", "date_only": false, "value": "2026-09-22T10:07:43.995756Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9231", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-22T10:07:43.995Z", "date_only": false, "value": "2026-09-22T10:07:43.995756Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9231", "record": "FKIE_CVE-2026-9231", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-22T10:25:30.905Z", "date_only": false, "value": "2026-09-22T10:25:30.905Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-9231", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-22T10:25:30.905Z", "date_only": false, "value": "2026-09-22T10:25:30.905Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9231", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-22T19:04:55.677Z", "date_only": false, "value": "2026-09-22T19:04:55.677", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9231", "record": "FKIE_CVE-2026-9231", "field": "lastModified"}, {"timestamp": "2026-09-29T04:00:25.848Z", "date_only": false, "value": "2026-09-29T04:00:25.848097Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwmwwivioz2l", "record": "CVE-2026-9231", "field": "creation_timestamp", "uuid": "ddf7f68d-ab59-4221-aced-aa7e571edc08", "content": "CVE-2026-9231: LFI in WP Travel Engine WordPress plugin (up to 6.8.0), CVSS 7.5. Contributors can include and execute arbitrary PHP files. No patch yet - disable plugin or restrict access. https://www.valtersit.com/cve/CVE-2026-9231/ #CVE #WordPress #infosec", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwmwwivioz2l"}, {"timestamp": "2026-09-29T04:00:33.872Z", "date_only": false, "value": "2026-09-29T04:00:33.872572Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117352328349258612", "record": "CVE-2026-9231", "field": "creation_timestamp", "uuid": "b00f94e5-4b99-4703-b59b-792ba060d986", "content": "CVE-2026-9231: LFI in WP Travel Engine WordPress plugin (up to 6.8.0), CVSS 7.5. Contributors can include and execute arbitrary PHP files. No patch yet - disable plugin or restrict access. https://www.valtersit.com/cve/CVE-2026-9231/ #CVE #WordPress #infosec", "url": "https://mastodon.social/users/hugovalters/statuses/117352328349258612"}]}