{"metadata": {"vulnerability": "cve-2026-19714", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-08-13T11:24:49.631Z", "date_only": false, "value": "2026-08-13T11:24:49.631Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-19714", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-16T06:00:16.209Z", "date_only": false, "value": "2026-08-16T06:00:16.209Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-19714", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-16T06:00:16.209Z", "date_only": false, "value": "2026-08-16T06:00:16.209Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "cve-2026-19714", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-16T06:16:52Z", "date_only": false, "value": "2026-08-16T06:16:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VQ3Q-W9WV-XC6J", "record": "GHSA-VQ3Q-W9WV-XC6J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-16T06:16:52.300Z", "date_only": false, "value": "2026-08-16T06:16:52.300", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19714", "record": "FKIE_CVE-2026-19714", "field": "published"}, {"timestamp": "2026-08-16T06:30:26Z", "date_only": false, "value": "2026-08-16T06:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VQ3Q-W9WV-XC6J", "record": "GHSA-VQ3Q-W9WV-XC6J", "field": "published"}, {"timestamp": "2026-08-16T07:30:25.545Z", "date_only": false, "value": "2026-08-16T07:30:25.545518Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117104012482062404", "record": "cve-2026-19714", "field": "creation_timestamp", "uuid": "1e8344fb-a1cd-4199-b251-325dbd5676ea", "content": "CVE-2026-19714 (CRITICAL): Simple JWT Login <3.6.8 for WordPress fails to validate Google token audiences. Sites with Google sign-in enabled risk admin impersonation & takeover. Disable Google sign-in or update ASAP. https://radar.offseq.com/threat/cve-2026-19714-cwe-287-improper-authentication-in-simple-jwt-login-2d90d2253c004239 #OffSeq #WordPress #CVE202619714", "url": "https://infosec.exchange/users/offseq/statuses/117104012482062404"}, {"timestamp": "2026-08-16T07:30:28.690Z", "date_only": false, "value": "2026-08-16T07:30:28.690737Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt6o5jsgmx2f", "record": "cve-2026-19714", "field": "creation_timestamp", "uuid": "a8d5eafa-1c5e-46ff-bc08-4d8a56449607", "content": "Simple JWT Login WordPress plugin (pre-3.6.8) has a CRITICAL auth flaw \u2014 Google sign-in lets attackers impersonate admins. Disable Google sign-in or upgrade when patch is confirmed. Details: https://radar.offseq.com/threat/cve-2026-19714-cwe-287-improper-authentication-in-simple-jwt-login-2d90d22...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mt6o5jsgmx2f"}, {"timestamp": "2026-08-17T20:03:43.331Z", "date_only": false, "value": "2026-08-17T20:03:43.331739Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-19714", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-08-17T20:03:43.331Z", "date_only": false, "value": "2026-08-17T20:03:43.331739Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19714", "record": "FKIE_CVE-2026-19714", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-17T20:04:22.225Z", "date_only": false, "value": "2026-08-17T20:04:22.225Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-19714", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-17T20:04:22.225Z", "date_only": false, "value": "2026-08-17T20:04:22.225Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-19714", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-17T21:31:18Z", "date_only": false, "value": "2026-08-17T21:31:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VQ3Q-W9WV-XC6J", "record": "GHSA-VQ3Q-W9WV-XC6J", "field": "modified"}, {"timestamp": "2026-08-17T22:00:06.259Z", "date_only": false, "value": "2026-08-17T22:00:06.259057Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcp7jjkkd24", "record": "CVE-2026-19714", "field": "creation_timestamp", "uuid": "73f7c634-65a9-49d7-9831-d169d06e3d2a", "content": "CVE-2026-19714 - simple jwt login\nThe Simple JWT Login WordPress plugin, used for Google sign-in, allows unauthorized users to access any account, including administrator accounts, if they have the correct email\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcp7jjkkd24"}, {"timestamp": "2026-08-26T16:30:52.723Z", "date_only": false, "value": "2026-08-26T16:30:52.723", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19714", "record": "FKIE_CVE-2026-19714", "field": "lastModified"}]}