{"metadata": {"vulnerability": "CVE-2026-94388", "count": 18, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-21T13:10:54.427Z", "date_only": false, "value": "2026-09-21T13:10:54.427Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-94388", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T06:45:00Z", "date_only": false, "value": "2026-10-14T06:45:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-94388", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-16T07:00:37.973Z", "date_only": false, "value": "2026-10-16T07:00:37.973Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-94388", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T07:00:37.973Z", "date_only": false, "value": "2026-10-16T07:00:37.973Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "CVE-2026-94388", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T07:17:14Z", "date_only": false, "value": "2026-10-16T07:17:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RPVQ-CC9F-QXVG", "record": "GHSA-RPVQ-CC9F-QXVG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T07:17:14.430Z", "date_only": false, "value": "2026-10-16T07:17:14.430", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94388", "record": "FKIE_CVE-2026-94388", "field": "published"}, {"timestamp": "2026-10-16T08:00:05.361Z", "date_only": false, "value": "2026-10-16T08:00:05.361067Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxy4ap3wu227", "record": "CVE-2026-94388", "field": "creation_timestamp", "uuid": "74678738-2929-4269-a6e0-3f08700a9ea1", "content": "CVE-2026-94388 - green popups\nThe Green Popups extension for WordPress, versions prior to 7.6.3, can be tricked into revealing information from its database. This could let a malicious user discover\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#greenpopups #halfdata #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxy4ap3wu227"}, {"timestamp": "2026-10-16T08:05:02.530Z", "date_only": false, "value": "2026-10-16T08:05:02.530901Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117449549543393694", "record": "CVE-2026-94388", "field": "creation_timestamp", "uuid": "a08bd754-987f-4e87-b32f-63b3355a59e2", "content": "CVE-2026-94388 WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3.\nhttps://www.cve.org/CVERecord?id=CVE-2026-94388https://patchstack.com/database/wordpress/plugin/halfdata-green-popups/vulnerability/wordpress-green-popups-plugin-7-6-3-sql-injection-vulnerability?_s_id=cve#halfdata #GreenPopups#CVE_2026_94388#bot", "url": "https://infosec.exchange/users/cve/statuses/117449549543393694"}, {"timestamp": "2026-10-16T08:07:56.868Z", "date_only": false, "value": "2026-10-16T08:07:56.868789Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxy4oqmqwx2w", "record": "CVE-2026-94388", "field": "creation_timestamp", "uuid": "f1840b93-1503-416e-ac9f-6bcc39564c43", "content": "\ud83d\udea8 CVE-2026-94388 \u2014 CVSS 9.3 CRITICAL\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfd...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94388\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxy4oqmqwx2w"}, {"timestamp": "2026-10-16T09:00:26.907Z", "date_only": false, "value": "2026-10-16T09:00:26.907196Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117449767396431044", "record": "cve-2026-94388", "field": "creation_timestamp", "uuid": "8ce7d8b4-3914-4d1c-ac39-aa8f6053fea3", "content": "CVE-2026-94388: CRITICAL SQL Injection in halfdata Green Popups (<7.6.3). Blind SQLi allows remote, unauthenticated data extraction. Patch status unclear \u2014 apply input validation. https://radar.offseq.com/threat/cve-2026-94388-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-999d0b4727612d6b #OffSeq #SQLInjection #Infosec #WordPress", "url": "https://infosec.exchange/users/offseq/statuses/117449767396431044"}, {"timestamp": "2026-10-16T09:00:28.521Z", "date_only": false, "value": "2026-10-16T09:00:28.521236Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxy7mnzyz423", "record": "cve-2026-94388", "field": "creation_timestamp", "uuid": "c437f8e9-f977-4c44-bc85-e5deec6726f4", "content": "CRITICAL SQL Injection (CVE-2026-94388) in halfdata Green Popups <7.6.3 lets attackers extract sensitive data remotely. Patch status unconfirmed \u2014 review controls ASAP. https://radar.offseq.com/threat/cve-2026-94388-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxy7mnzyz423"}, {"timestamp": "2026-10-16T09:30:29Z", "date_only": false, "value": "2026-10-16T09:30:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RPVQ-CC9F-QXVG", "record": "GHSA-RPVQ-CC9F-QXVG", "field": "published"}, {"timestamp": "2026-10-16T09:30:29Z", "date_only": false, "value": "2026-10-16T09:30:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RPVQ-CC9F-QXVG", "record": "GHSA-RPVQ-CC9F-QXVG", "field": "modified"}, {"timestamp": "2026-10-16T14:53:18.290Z", "date_only": false, "value": "2026-10-16T14:53:18.290591Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94388", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T14:53:18.290Z", "date_only": false, "value": "2026-10-16T14:53:18.290591Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94388", "record": "FKIE_CVE-2026-94388", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T15:09:36.628Z", "date_only": false, "value": "2026-10-16T15:09:36.628Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-94388", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:09:36.628Z", "date_only": false, "value": "2026-10-16T15:09:36.628Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94388", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:19:36.177Z", "date_only": false, "value": "2026-10-16T15:19:36.177", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94388", "record": "FKIE_CVE-2026-94388", "field": "lastModified"}]}