{"metadata": {"vulnerability": "CVE-2026-92807", "count": 19, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-09-16T19:48:03.924Z", "date_only": false, "value": "2026-09-16T19:48:03.924Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-92807", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-17T12:04:01Z", "date_only": false, "value": "2026-09-17T12:04:01.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-92807", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-18T14:00:21Z", "date_only": false, "value": "2026-09-18T14:00:21.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-92807", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-09-19T02:27:13.066Z", "date_only": false, "value": "2026-09-19T02:27:13.066Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-92807", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-19T02:27:13.066Z", "date_only": false, "value": "2026-09-19T02:27:13.066Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-92807", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-19T03:17:17Z", "date_only": false, "value": "2026-09-19T03:17:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3FG9-62HH-37MH", "record": "GHSA-3FG9-62HH-37MH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-19T03:17:17.723Z", "date_only": false, "value": "2026-09-19T03:17:17.723", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92807", "record": "FKIE_CVE-2026-92807", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-19T03:32:03Z", "date_only": false, "value": "2026-09-19T03:32:03Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3FG9-62HH-37MH", "record": "GHSA-3FG9-62HH-37MH", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-19T03:32:03Z", "date_only": false, "value": "2026-09-19T03:32:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3FG9-62HH-37MH", "record": "GHSA-3FG9-62HH-37MH", "field": "modified"}, {"timestamp": "2026-09-19T06:00:26.951Z", "date_only": false, "value": "2026-09-19T06:00:26.951314Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117296177232528367", "record": "cve-2026-92807", "field": "creation_timestamp", "uuid": "92c909d3-09c1-47ea-ba31-f5a6e98fc9d1", "content": "CVE-2026-92807: HIGH severity (CVSS 8.8) code injection in pdfcrowd Save as PDF Plugin for WordPress (<=4.6.1). Contributor+ users can run arbitrary PHP \u2014 risking API credential leaks & server compromise. Restrict access, monitor for patch. https://radar.offseq.com/threat/cve-2026-92807-cwe-94-improper-control-of-generation-of-code-code-injection-in-pdfcrowd-save-as-pdf-bd60570e4aef57a5 #OffSeq #WordPress #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117296177232528367"}, {"timestamp": "2026-09-19T06:00:31.845Z", "date_only": false, "value": "2026-09-19T06:00:31.845867Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvtyxx7lxm24", "record": "cve-2026-92807", "field": "creation_timestamp", "uuid": "4fe75d9b-b0bd-4bb8-b425-f37b221aa1b2", "content": "CVE-2026-92807: HIGH severity code injection in pdfcrowd Save as PDF Plugin (<=4.6.1). Contributor+ users can execute PHP code. Restrict access, consider disabling plugin until patched. https://radar.offseq.com/threat/cve-2026-92807-cwe-94-improper-control-of-generation-of-code-code-injection-in-...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvtyxx7lxm24"}, {"timestamp": "2026-09-19T07:03:58.960Z", "date_only": false, "value": "2026-09-19T07:03:58.960630Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4jiaxfv2b", "record": "CVE-2026-92807", "field": "creation_timestamp", "uuid": "acb03af1-6956-42e7-9f35-38a99d524089", "content": "\ud83d\udfe0 CVE-2026-92807 - High (8.8)\n\nThe Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function Invoc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-92807/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4jiaxfv2b"}, {"timestamp": "2026-09-19T13:25:13.493Z", "date_only": false, "value": "2026-09-19T13:25:13.493506Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-92807", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-19T13:25:13.493Z", "date_only": false, "value": "2026-09-19T13:25:13.493506Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92807", "record": "FKIE_CVE-2026-92807", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-19T14:01:25.572Z", "date_only": false, "value": "2026-09-19T14:01:25.572Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-92807", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-19T14:01:25.572Z", "date_only": false, "value": "2026-09-19T14:01:25.572Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-92807", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-21T13:33:33.387Z", "date_only": false, "value": "2026-09-21T13:33:33.387", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92807", "record": "FKIE_CVE-2026-92807", "field": "lastModified"}, {"timestamp": "2026-09-25T07:10:06.053Z", "date_only": false, "value": "2026-09-25T07:10:06.053086Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117330424741303656", "record": "CVE-2026-92807", "field": "creation_timestamp", "uuid": "0e3450bc-dda5-4233-a085-f8b9ffcb66dd", "content": "CVE-2026-92807 PDFCrowd Save as PDF WP plugin, all versions to 4.6.1: arbitrary function invocation via pdf_created_callback, CVSS 8.8. No patch yet, so disable the plugin. Details: https://www.valtersit.com/cve/CVE-2026-92807/ #CVE #WordPress #infosec", "url": "https://mastodon.social/users/hugovalters/statuses/117330424741303656"}, {"timestamp": "2026-09-25T07:30:04.075Z", "date_only": false, "value": "2026-09-25T07:30:04.075297Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwdarny3g425", "record": "CVE-2026-92807", "field": "creation_timestamp", "uuid": "104aca5a-8ddd-4eab-9395-d6b36e3a8a8d", "content": "CVE-2026-92807 PDFCrowd Save as PDF WP plugin, all versions to 4.6.1: arbitrary function invocation via pdf_created_callback, CVSS 8.8. No patch yet, so disable the plugin. Details: https://www.valtersit.com/cve/CVE-2026-92807/ #CVE #WordPress #infosec", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwdarny3g425"}], "metrics": {"as_of": "2026-10-28T12:37:42.596Z", "anchors": {"origin": {"timestamp": "2026-09-19T02:27:13.066Z", "date_only": false, "value": "2026-09-19T02:27:13.066Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-92807", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-19T02:27:13.066Z", "date_only": false, "value": "2026-09-19T02:27:13.066Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-92807", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 3406229.530743, "hours": 946.1748696508333, "days": 39.42395290211806, "min_seconds": 3406229.530743, "max_seconds": 3406229.530743, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-19T02:27:13.066Z", "date_only": false, "value": "2026-09-19T02:27:13.066Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-92807", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T12:37:42.596Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}