{"metadata": {"vulnerability": "cve-2026-6279", "count": 33, "kinds": {"milestone": 4, "sighting": 19, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-04-14T14:08:39.242Z", "date_only": false, "value": "2026-04-14T14:08:39.242Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-6279", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-15T07:44:24Z", "date_only": false, "value": "2026-04-15T07:44:24.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2026-6279", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-05-20T15:45:14Z", "date_only": false, "value": "2026-05-20T15:45:14.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2026-6279", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-05-21T04:27:57.613Z", "date_only": false, "value": "2026-05-21T04:27:57.613Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-6279", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-21T04:27:57.613Z", "date_only": false, "value": "2026-05-21T04:27:57.613Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2026-6279", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-21T05:16:23Z", "date_only": false, "value": "2026-05-21T05:16:23Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F53P-382V-8PJ7", "record": "GHSA-F53P-382V-8PJ7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-21T05:16:23.770Z", "date_only": false, "value": "2026-05-21T05:16:23.770", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-6279", "record": "FKIE_CVE-2026-6279", "field": "published"}, {"timestamp": "2026-05-21T06:31:31Z", "date_only": false, "value": "2026-05-21T06:31:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F53P-382V-8PJ7", "record": "GHSA-F53P-382V-8PJ7", "field": "published"}, {"timestamp": "2026-05-21T06:31:31Z", "date_only": false, "value": "2026-05-21T06:31:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F53P-382V-8PJ7", "record": "GHSA-F53P-382V-8PJ7", "field": "modified"}, {"timestamp": "2026-05-21T06:53:23.604Z", "date_only": false, "value": "2026-05-21T06:53:23.604636Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmdtj6esyd2t", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "462b9fea-eb00-47a2-a676-54413b73a0d7", "content": "CVE-2026-6279 - Avada (Fusion) Builder\nCVE ID : CVE-2026-6279\n \n Published : May 21, 2026, 5:16 a.m. | 30\u00a0minutes ago\n \n Description : The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in v...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmdtj6esyd2t"}, {"timestamp": "2026-05-21T11:32:28.860Z", "date_only": false, "value": "2026-05-21T11:32:28.860473Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmed3x6lqk2s", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "6bcdf49e-939c-4dbd-ae30-5efcfc3dc326", "content": "\ud83d\udea8 Critical WordPress flaw: CVE-2026-6279 impacts Avada Builder with unauthenticated remote code execution (CVSS 9.8).\n\nAttackers can abuse exposed AJAX functionality and unsafe PHP calls to fully compromise affected sites.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#WordPress #CVE #CyberSecurity", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3mmed3x6lqk2s"}, {"timestamp": "2026-05-21T11:32:29.460Z", "date_only": false, "value": "2026-05-21T11:32:29.460067Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmed42ahlc2s", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "15db9a87-46d0-4425-8485-37dfd07939cc", "content": "\ud83d\udea8 Critical WordPress flaw: CVE-2026-6279 impacts Avada Builder with unauthenticated remote code execution (CVSS 9.8).\n\nAttackers can abuse exposed AJAX functionality and unsafe PHP calls to fully compromise affected sites.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#WordPress #CVE #CyberSecurity", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3mmed42ahlc2s"}, {"timestamp": "2026-05-21T11:32:30.096Z", "date_only": false, "value": "2026-05-21T11:32:30.096609Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmed44knm22s", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "064c737c-897c-4495-9986-dc4c5caeb500", "content": "\ud83d\udea8 Critical WordPress flaw: CVE-2026-6279 impacts Avada Builder with unauthenticated remote code execution (CVSS 9.8).\n\nAttackers can abuse exposed AJAX functionality and unsafe PHP calls to fully compromise affected sites.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#WordPress #CVE #CyberSecurity", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3mmed44knm22s"}, {"timestamp": "2026-05-21T12:22:05.314Z", "date_only": false, "value": "2026-05-21T12:22:05.314059Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-6279", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-21T12:22:05.314Z", "date_only": false, "value": "2026-05-21T12:22:05.314059Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-6279", "record": "FKIE_CVE-2026-6279", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-21T12:23:02.544Z", "date_only": false, "value": "2026-05-21T12:23:02.544Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-6279", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-21T12:23:02.544Z", "date_only": false, "value": "2026-05-21T12:23:02.544Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-6279", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-21T14:32:06.794Z", "date_only": false, "value": "2026-05-21T14:32:06.794810Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmen5gifsj2l", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "89359202-3d07-44af-90f9-c8f05117eba7", "content": "CVE-2026-6279 fusion-builder (CVSS Score 9.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "url": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmen5gifsj2l"}, {"timestamp": "2026-05-23T07:00:10Z", "date_only": false, "value": "2026-05-23T07:00:10.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Otu6Jbe8lDXdP_SNoyBScRz6BIgHRvrsI4mTky3IQgsujWk", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "911eb6c6-0a7a-4c13-8382-9aa8a2d8b130"}, {"timestamp": "2026-05-23T10:00:04Z", "date_only": false, "value": "2026-05-23T10:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/85531", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "8878ba4c-ad10-4f24-9416-4dcc0c03fcec", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6279\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zycoder0day\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-23 09:53:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-6279 \u2014 Avada Builder <= 3.15.2 Unauthenticated RCE via call_user_func()\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/85531"}, {"timestamp": "2026-05-23T11:00:10Z", "date_only": false, "value": "2026-05-23T11:00:10.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/YOQGsHs7r9jLQhgNqTX3PSQIcC6Mwf3lNqWfwu3WHaM-0RY", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "80135d4d-ef64-4e9b-9599-04a62d971b24"}, {"timestamp": "2026-05-23T15:00:07Z", "date_only": false, "value": "2026-05-23T15:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_KWAnd6RR6PDJnxcxd09YuafzYNN0qOVlN75nUN-G9yG8iw", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "bbc362e7-45a0-4256-a356-81e8d9eea1cb"}, {"timestamp": "2026-06-13T15:00:07Z", "date_only": false, "value": "2026-06-13T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rpU8_0BAIqup9jbze7w25ozrvXdkaGKGrrCImb0BnEmBLEk", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "329b2002-8a38-4408-ba33-5517f83ac03a"}, {"timestamp": "2026-06-13T15:00:16Z", "date_only": false, "value": "2026-06-13T15:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/dt0AF8_y_UrMLbm3nbIzl56WQ7K0nt860xLQHDp_bOOwKbw", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "88db0831-7185-44b4-9b12-36f02a908393"}, {"timestamp": "2026-06-22T02:17:07.736Z", "date_only": false, "value": "2026-06-22T02:17:07.736377Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motsyneres2r", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "ef6f6c15-7770-484c-bbc2-39ecf644cba8", "content": "\ud83d\udea8  ALERT: CVE-2026-6279\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nThe Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in versions up to and including 3.15.2. This is due to the `wp_conditional_tags` case in `Fusion_Builder_Condi", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motsyneres2r"}, {"timestamp": "2026-07-13T22:00:43.612Z", "date_only": false, "value": "2026-07-13T22:00:43.612882Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/88622", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "942dd0ba-056c-4114-b672-6900ff022eab", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6279.py\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 87achrafg-stack\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 11:40:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-6279\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/88622"}, {"timestamp": "2026-07-15T00:00:05.633Z", "date_only": false, "value": "2026-07-15T00:00:05.633400Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/88622", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "b69fad4d-b158-489f-9793-f2f79721e7d4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6279.py\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 87achrafg-stack\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 11:40:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-6279\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/88622"}, {"timestamp": "2026-07-23T15:10:00.137Z", "date_only": false, "value": "2026-07-23T15:10:00.137", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-6279", "record": "FKIE_CVE-2026-6279", "field": "lastModified"}, {"timestamp": "2026-08-22T09:00:03.049Z", "date_only": false, "value": "2026-08-22T09:00:03.049037Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/13005", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "f5065185-a19c-41f3-8a8e-bad551f488ce", "content": "CVE-2026-6279 \u2013 kitploit.com\n\nSat, 22 Aug 2026 13:07:25", "url": "https://t.me/TengkorakCyberCrewzz/13005"}, {"timestamp": "2026-08-22T09:00:03.359Z", "date_only": false, "value": "2026-08-22T09:00:03.359508Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MalaysiaHacktivistz/24202", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "01a3f1fe-cf6b-42b2-b791-96832e6e5de5", "content": "CVE-2026-6279 \u2013 kitploit.com\n\nSat, 22 Aug 2026 13:07:25", "url": "https://t.me/MalaysiaHacktivistz/24202"}, {"timestamp": "2026-08-23T00:00:40.761Z", "date_only": false, "value": "2026-08-23T00:00:40.761157Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TengkorakCyberCrewzz/13005", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "6babb14b-3426-4fc3-a3fe-d5fc712e2e6d", "content": "CVE-2026-6279 \u2013 kitploit.com\n\nSat, 22 Aug 2026 13:07:25", "url": "https://t.me/TengkorakCyberCrewzz/13005"}, {"timestamp": "2026-09-04T17:00:05.638Z", "date_only": false, "value": "2026-09-04T17:00:05.638476Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MalaysiaHacktivistz/14822", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "a48cbf49-d59d-4c9b-9655-9fce328b861b", "content": "CVE-2026-6279 \u2013 kitploit.com\n\nSat, 22 Aug 2026 13:07:25", "url": "https://t.me/MalaysiaHacktivistz/14822"}, {"timestamp": "2026-10-20T23:52:51Z", "date_only": false, "value": "2026-10-20T23:52:51.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6279.yaml", "record": "CVE-2026-6279", "field": "creation_timestamp", "uuid": "bbe85cdb-edd7-46b8-992a-ebf4934331ca", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6279.yaml"}]}