{"metadata": {"vulnerability": "cve-2026-108291", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-09T17:57:09.806Z", "date_only": false, "value": "2026-10-09T17:57:09.806Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-108291", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T12:07:21Z", "date_only": false, "value": "2026-10-12T12:07:21.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "cve-2026-108291", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T12:08:28.433Z", "date_only": false, "value": "2026-10-14T12:08:28.433Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-108291", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T12:08:28.433Z", "date_only": false, "value": "2026-10-14T12:08:28.433Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "cve-2026-108291", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T13:10:05.565Z", "date_only": false, "value": "2026-10-14T13:10:05.565415Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtmn6mvos2n", "record": "CVE-2026-108291", "field": "creation_timestamp", "uuid": "fedeb94d-ce02-44b9-a310-ddc660a1403f", "content": "CVE-2026-108291 - affiliates\nThe Affiliates plugin for WordPress (up to version 7.0.1) can be tricked into processing malicious data, which could let an attacker execute unwanted actions on your site.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#affiliates #itthinx #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtmn6mvos2n"}, {"timestamp": "2026-10-14T13:17:24Z", "date_only": false, "value": "2026-10-14T13:17:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-96VJ-5338-HRMJ", "record": "GHSA-96VJ-5338-HRMJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T13:17:24.633Z", "date_only": false, "value": "2026-10-14T13:17:24.633", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108291", "record": "FKIE_CVE-2026-108291", "field": "published"}, {"timestamp": "2026-10-14T13:48:15.591Z", "date_only": false, "value": "2026-10-14T13:48:15.591335Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6lanky3cxzflj", "record": "CVE-2026-108291", "field": "creation_timestamp", "uuid": "aa03e263-4d9f-4bc1-8dcf-c27efb42f2a9", "content": "CVE-2026-108291 - WordPress Affiliates plugin\nCVE ID : CVE-2026-108291\n \n Published : Oct. 14, 2026, 12:08 p.m. | 25\u00a0minutes ago\n \n Description : Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affilia...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/6lanky3cxzflj"}, {"timestamp": "2026-10-14T14:07:25.779Z", "date_only": false, "value": "2026-10-14T14:07:25.779090Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtptpmrop2l", "record": "CVE-2026-108291", "field": "creation_timestamp", "uuid": "98661748-1314-4b43-a837-aeb86c168595", "content": "\ud83d\udea8 CVE-2026-108291 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.Th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108291\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtptpmrop2l"}, {"timestamp": "2026-10-14T15:32:18Z", "date_only": false, "value": "2026-10-14T15:32:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-96VJ-5338-HRMJ", "record": "GHSA-96VJ-5338-HRMJ", "field": "published"}, {"timestamp": "2026-10-14T15:32:18Z", "date_only": false, "value": "2026-10-14T15:32:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-96VJ-5338-HRMJ", "record": "GHSA-96VJ-5338-HRMJ", "field": "modified"}, {"timestamp": "2026-10-14T18:16:40.099Z", "date_only": false, "value": "2026-10-14T18:16:40.099024Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440629934842588", "record": "CVE-2026-108291", "field": "creation_timestamp", "uuid": "7f6dd00f-de93-45f5-9661-f18f892dee28", "content": "CVE-2026-108291 WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108291https://patchstack.com/database/wordpress/plugin/affiliates/vulnerability/wordpress-affiliates-plugin-7-0-1-php-object-injection-vulnerability?_s_id=cve#itthinx #Affiliates#CVE_2026_108291#bot", "url": "https://infosec.exchange/users/cve/statuses/117440629934842588"}, {"timestamp": "2026-10-15T10:50:40.674Z", "date_only": false, "value": "2026-10-15T10:50:40.674639Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108291", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T10:50:40.674Z", "date_only": false, "value": "2026-10-15T10:50:40.674639Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108291", "record": "FKIE_CVE-2026-108291", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T16:43:47.695Z", "date_only": false, "value": "2026-10-15T16:43:47.695Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-108291", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:43:47.695Z", "date_only": false, "value": "2026-10-15T16:43:47.695Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108291", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T17:17:14.040Z", "date_only": false, "value": "2026-10-15T17:17:14.040", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108291", "record": "FKIE_CVE-2026-108291", "field": "lastModified"}]}