{"metadata": {"vulnerability": "cve-2026-28164", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-02-25T12:14:34.737Z", "date_only": false, "value": "2026-02-25T12:14:34.737Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-28164", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-20T12:38:06.554Z", "date_only": false, "value": "2026-08-20T12:38:06.554Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-28164", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-20T12:38:06.554Z", "date_only": false, "value": "2026-08-20T12:38:06.554Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "cve-2026-28164", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-20T13:17:27Z", "date_only": false, "value": "2026-08-20T13:17:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CGHH-6X9C-84PF", "record": "GHSA-CGHH-6X9C-84PF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-20T13:17:27.250Z", "date_only": false, "value": "2026-08-20T13:17:27.250", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28164", "record": "FKIE_CVE-2026-28164", "field": "published"}, {"timestamp": "2026-08-20T13:30:27.240Z", "date_only": false, "value": "2026-08-20T13:30:27.240102Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117128077414913778", "record": "cve-2026-28164", "field": "creation_timestamp", "uuid": "2ab523b1-72bd-4fff-9874-12acb1b8739d", "content": "CVE-2026-28164: CRITICAL CSRF in HashThemes Easy Elementor Addons \u22642.3.7. Remote attackers can exploit this for full user compromise. No patch yet \u2014 track vendor advisories. CVSS 9.6. https://radar.offseq.com/threat/cve-2026-28164-cwe-352-cross-site-request-forgery-csrf-in-hashthemes-easy-elementor-addons-7bfb9b1be22a1e31 #OffSeq #WordPress #CSRF #CVE2026_28164", "url": "https://infosec.exchange/users/offseq/statuses/117128077414913778"}, {"timestamp": "2026-08-20T13:30:29.165Z", "date_only": false, "value": "2026-08-20T13:30:29.165087Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtje4yqmmv2n", "record": "cve-2026-28164", "field": "creation_timestamp", "uuid": "a70b416f-f7af-4c6d-9f6d-8894235f6109", "content": "CRITICAL CSRF vulnerability (CVE-2026-28164) in HashThemes Easy Elementor Addons \u22642.3.7 lets attackers execute actions as users. No patch yet \u2014 monitor vendor for updates. https://radar.offseq.com/threat/cve-2026-28164-cwe-352-cross-site-request-forgery-csrf-in-hashthemes-easy-elementor-addons-7b...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mtje4yqmmv2n"}, {"timestamp": "2026-08-20T14:09:56.890Z", "date_only": false, "value": "2026-08-20T14:09:56.890340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtjgdlg5vl25", "record": "CVE-2026-28164", "field": "creation_timestamp", "uuid": "20737b75-3565-47a5-846f-582529d51dee", "content": "\ud83d\udea8 CVE-2026-28164 \u2014 CVSS 9.6 CRITICAL\n\nCross-Site Request Forgery (CSRF) vulnerability in HashThemes Easy Elementor Addons allows Cross Site Reque...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-28164\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mtjgdlg5vl25"}, {"timestamp": "2026-08-20T14:30:04.644Z", "date_only": false, "value": "2026-08-20T14:30:04.644393Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjhhkmksj23", "record": "CVE-2026-28164", "field": "creation_timestamp", "uuid": "7b577565-b3ff-4011-964b-b6da624c260f", "content": "CVE-2026-28164 - easy elementor addons\nThe Easy Elementor Addons add\u2011on for WordPress (versions up to 2.3.7) can be tricked into performing actions without the site owner\u2019s permission. This could let a malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hashthemes #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjhhkmksj23"}, {"timestamp": "2026-08-20T14:36:05.913Z", "date_only": false, "value": "2026-08-20T14:36:05.913099Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-28164", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-20T14:36:05.913Z", "date_only": false, "value": "2026-08-20T14:36:05.913099Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28164", "record": "FKIE_CVE-2026-28164", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-20T14:36:17.293Z", "date_only": false, "value": "2026-08-20T14:36:17.293Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-28164", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-20T14:36:17.293Z", "date_only": false, "value": "2026-08-20T14:36:17.293Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-28164", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-20T14:37:04.973Z", "date_only": false, "value": "2026-08-20T14:37:04.973176Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ihjjej63cquvp", "record": "CVE-2026-28164", "field": "creation_timestamp", "uuid": "b09ad7cd-d805-4b07-a08d-e0f7fd950ecd", "content": "CVE-2026-28164 - WordPress Easy Elementor Addons plugin\nCVE ID : CVE-2026-28164\n \n Published : Aug. 20, 2026, 1:17 p.m. | 32\u00a0minutes ago\n \n Description : Cross-Site Request Forgery (CSRF) vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery.\n\nThi...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/ihjjej63cquvp"}, {"timestamp": "2026-08-20T15:34:16Z", "date_only": false, "value": "2026-08-20T15:34:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CGHH-6X9C-84PF", "record": "GHSA-CGHH-6X9C-84PF", "field": "published"}, {"timestamp": "2026-08-20T15:34:16Z", "date_only": false, "value": "2026-08-20T15:34:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CGHH-6X9C-84PF", "record": "GHSA-CGHH-6X9C-84PF", "field": "modified"}, {"timestamp": "2026-08-24T16:40:53.647Z", "date_only": false, "value": "2026-08-24T16:40:53.647", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28164", "record": "FKIE_CVE-2026-28164", "field": "lastModified"}]}