{"metadata": {"vulnerability": "CVE-2026-9290", "count": 23, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-05-22T16:52:45.960Z", "date_only": false, "value": "2026-05-22T16:52:45.960Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-9290", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-30T08:54:29Z", "date_only": false, "value": "2026-05-30T08:54:29.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-9290", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-9290", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-06-05T23:28:26.787Z", "date_only": false, "value": "2026-06-05T23:28:26.787Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-9290", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-05T23:28:26.787Z", "date_only": false, "value": "2026-06-05T23:28:26.787Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-9290", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-06T00:16:42Z", "date_only": false, "value": "2026-06-06T00:16:42Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-83V9-496W-54WX", "record": "GHSA-83V9-496W-54WX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-06T00:16:42.303Z", "date_only": false, "value": "2026-06-06T00:16:42.303", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9290", "record": "FKIE_CVE-2026-9290", "field": "published"}, {"timestamp": "2026-06-06T00:31:39Z", "date_only": false, "value": "2026-06-06T00:31:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-83V9-496W-54WX", "record": "GHSA-83V9-496W-54WX", "field": "published"}, {"timestamp": "2026-06-06T00:31:39Z", "date_only": false, "value": "2026-06-06T00:31:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-83V9-496W-54WX", "record": "GHSA-83V9-496W-54WX", "field": "modified"}, {"timestamp": "2026-06-06T01:00:08.527Z", "date_only": false, "value": "2026-06-06T01:00:08.527109Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlha7sokz2g", "record": "CVE-2026-9290", "field": "creation_timestamp", "uuid": "8f18a6d0-7a38-4616-9897-ffd31fcccc71", "content": "\ud83d\udfe0 CVE-2026-9290 - High (7.5)\n\nThe WP User Manager \u2013 User Profile Builder & Membership plugin for WordPress is vulnerable to L...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9290/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlha7sokz2g"}, {"timestamp": "2026-06-06T01:23:54.569Z", "date_only": false, "value": "2026-06-06T01:23:54.569361Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlikqk23d2r", "record": "CVE-2026-9290", "field": "creation_timestamp", "uuid": "d1bbaf11-e568-47f4-8ec4-7dd23d2e1c00", "content": "CVE-2026-9290 - WP User Manager\nCVE ID : CVE-2026-9290\n \n Published : June 6, 2026, 12:16 a.m. | 16\u00a0minutes ago\n \n Description : The WP User Manager \u2013 User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and in...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlikqk23d2r"}, {"timestamp": "2026-06-06T06:00:11.366Z", "date_only": false, "value": "2026-06-06T06:00:11.366083Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnlxyr5bek2b", "record": "CVE-2026-9290", "field": "creation_timestamp", "uuid": "6cf70252-852a-434e-ad44-f578e1bd271e", "content": "CVE-2026-9290. WP User Manager plugin. 7.5/10 CVSS.\n\nAny visitor reads wp-config.php. Database credentials exposed. PHP execution. Your server becomes theirs.\n\nUpdate to 2.9.17 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #LFI #CyberSecurity", "url": "https://bsky.app/profile/pulse-wp.com/post/3mnlxyr5bek2b"}, {"timestamp": "2026-06-06T11:39:10.694Z", "date_only": false, "value": "2026-06-06T11:39:10.694464Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9290", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-06T11:39:10.694Z", "date_only": false, "value": "2026-06-06T11:39:10.694464Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9290", "record": "FKIE_CVE-2026-9290", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-06T11:49:17.970Z", "date_only": false, "value": "2026-06-06T11:49:17.970Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-9290", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-06T11:49:17.970Z", "date_only": false, "value": "2026-06-06T11:49:17.970Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9290", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-10T07:07:43Z", "date_only": false, "value": "2026-06-10T07:07:43.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-9290.yaml", "record": "CVE-2026-9290", "field": "creation_timestamp", "uuid": "956cea10-6a30-48e2-a218-8bb7d9bfe69b", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-9290.yaml"}, {"timestamp": "2026-06-14T18:16:06.950Z", "date_only": false, "value": "2026-06-14T18:16:06.950888Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mobeu2pmfd2e", "record": "CVE-2026-9290", "field": "creation_timestamp", "uuid": "e196045f-636c-4278-bc72-4f9614c85e24", "content": "CVE-2026-9290 wp-user-manager (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "url": "https://bsky.app/profile/atomicedge.bsky.social/post/3mobeu2pmfd2e"}, {"timestamp": "2026-07-13T22:00:11.788Z", "date_only": false, "value": "2026-07-13T22:00:11.788284Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92104", "record": "CVE-2026-9290", "field": "creation_timestamp", "uuid": "b8ca4172-5c8e-45f2-a6bc-20eeaa99be81", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9290\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 23:18:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth Local File Inclusion in WP User Manager <= 2.9.17 via path traversal in tab parameter (CVSS 7.5)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92104"}, {"timestamp": "2026-07-15T00:00:30.092Z", "date_only": false, "value": "2026-07-15T00:00:30.092702Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/92104", "record": "CVE-2026-9290", "field": "creation_timestamp", "uuid": "3d518b2f-04f0-4898-a2ad-d4460d1f1a10", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9290\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 23:18:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth Local File Inclusion in WP User Manager <= 2.9.17 via path traversal in tab parameter (CVSS 7.5)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92104"}, {"timestamp": "2026-07-16T19:00:21.103Z", "date_only": false, "value": "2026-07-16T19:00:21.103289Z", "kind": "sighting", "label": "Seen", "source": "Telegram/weN5BIEcpzWRP-culIl-ZBjR5vCD_HYHl8jd7V-2oU2RFQY", "record": "CVE-2026-9290", "field": "creation_timestamp", "uuid": "9134c5a1-2238-4b17-9df8-fe57396dcad7"}, {"timestamp": "2026-07-18T00:00:23.206Z", "date_only": false, "value": "2026-07-18T00:00:23.206339Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/weN5BIEcpzWRP-culIl-ZBjR5vCD_HYHl8jd7V-2oU2RFQY", "record": "CVE-2026-9290", "field": "creation_timestamp", "uuid": "14919c52-1481-4556-8bfc-0116636f71ac"}, {"timestamp": "2026-07-23T07:10:00.113Z", "date_only": false, "value": "2026-07-23T07:10:00.113", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9290", "record": "FKIE_CVE-2026-9290", "field": "lastModified"}]}