{"metadata": {"vulnerability": "cve-2026-5229", "count": 19, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-03-31T13:24:44.823Z", "date_only": false, "value": "2026-03-31T13:24:44.823Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-5229", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-14T03:50:43Z", "date_only": false, "value": "2026-05-14T03:50:43.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2026-5229", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-05-14T18:59:36Z", "date_only": false, "value": "2026-05-14T18:59:36.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2026-5229", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-05-15T07:46:36.949Z", "date_only": false, "value": "2026-05-15T07:46:36.949Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-5229", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-15T07:46:36.949Z", "date_only": false, "value": "2026-05-15T07:46:36.949Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2026-5229", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-15T09:00:31.466Z", "date_only": false, "value": "2026-05-15T09:00:31.466027Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mluxsxr7ya2y", "record": "cve-2026-5229", "field": "creation_timestamp", "uuid": "1c4ee02c-ded2-4934-a6b6-0e67fbdb3add", "content": "CRITICAL: WordPress Form Notify plugin \u22641.1.10 allows full account takeover via OAuth authentication bypass. Disable or patch ASAP. Details: https://radar.offseq.com/threat/cve-2026-5229-cwe-287-improper-authentication-in-m-73809aa0 #OffSeq #WordPress #CVE20265229", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mluxsxr7ya2y"}, {"timestamp": "2026-05-15T09:16:16Z", "date_only": false, "value": "2026-05-15T09:16:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6CPV-J32F-RQMR", "record": "GHSA-6CPV-J32F-RQMR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-15T09:16:16.690Z", "date_only": false, "value": "2026-05-15T09:16:16.690", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5229", "record": "FKIE_CVE-2026-5229", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-15T09:31:32Z", "date_only": false, "value": "2026-05-15T09:31:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6CPV-J32F-RQMR", "record": "GHSA-6CPV-J32F-RQMR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-15T09:31:32Z", "date_only": false, "value": "2026-05-15T09:31:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6CPV-J32F-RQMR", "record": "GHSA-6CPV-J32F-RQMR", "field": "modified"}, {"timestamp": "2026-05-15T10:00:26.703Z", "date_only": false, "value": "2026-05-15T10:00:26.703762Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlv363rg662w", "record": "CVE-2026-5229", "field": "creation_timestamp", "uuid": "b99c98bf-1b9a-4ecf-b6ed-ee9643ea7fe4", "content": "\ud83d\udd34 CVE-2026-5229 - Critical (9.8)\n\nThe Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5229/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlv363rg662w"}, {"timestamp": "2026-05-15T11:31:06.820Z", "date_only": false, "value": "2026-05-15T11:31:06.820132Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlvaaa44ml2k", "record": "CVE-2026-5229", "field": "creation_timestamp", "uuid": "d8a0c743-62df-4130-b995-de9d6a8d5f72", "content": "CVE-2026-5229 - Receive Notifications After Form Submitting \u2013 Form Notify for Any Forms\nCVE ID : CVE-2026-5229\n \n Published : May 15, 2026, 9:16 a.m. | 50\u00a0minutes ago\n \n Description : The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlvaaa44ml2k"}, {"timestamp": "2026-05-15T13:16:05.665Z", "date_only": false, "value": "2026-05-15T13:16:05.665357Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-5229", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-15T13:16:05.665Z", "date_only": false, "value": "2026-05-15T13:16:05.665357Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5229", "record": "FKIE_CVE-2026-5229", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-15T13:27:33.984Z", "date_only": false, "value": "2026-05-15T13:27:33.984Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-5229", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-15T13:27:33.984Z", "date_only": false, "value": "2026-05-15T13:27:33.984Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-5229", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-26T07:00:13Z", "date_only": false, "value": "2026-05-26T07:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0GiSZs1mYgE6usTH1T9gS9Io2DYBjx6aLN6oDmWf5dZhrI8", "record": "CVE-2026-5229", "field": "creation_timestamp", "uuid": "81a1c9ac-a301-40e4-bf31-47959e374110"}, {"timestamp": "2026-05-26T09:00:04Z", "date_only": false, "value": "2026-05-26T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6xSl8M-nlr0DVWrXfh1_Vgp809cFlu-RWegCg0E_A2g7m3o", "record": "CVE-2026-5229", "field": "creation_timestamp", "uuid": "e30bb8b7-7afc-4019-ab39-a79d049c5ebd"}, {"timestamp": "2026-06-17T10:58:38.607Z", "date_only": false, "value": "2026-06-17T10:58:38.607", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5229", "record": "FKIE_CVE-2026-5229", "field": "lastModified"}], "metrics": {"as_of": "2026-10-31T19:25:04.150Z", "anchors": {"origin": {"timestamp": "2026-05-15T07:46:36.949Z", "date_only": false, "value": "2026-05-15T07:46:36.949Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-5229", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-15T07:46:36.949Z", "date_only": false, "value": "2026-05-15T07:46:36.949Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-5229", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 14643507.201844, "hours": 4067.640889401111, "days": 169.48503705837962, "min_seconds": 14643507.201844, "max_seconds": 14643507.201844, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-15T07:46:36.949Z", "date_only": false, "value": "2026-05-15T07:46:36.949Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-5229", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T19:25:04.150Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}