{"metadata": {"vulnerability": "cve-2026-84252", "count": 14, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-01T13:21:53.418Z", "date_only": false, "value": "2026-09-01T13:21:53.418Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-84252", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-11T06:00:12.413Z", "date_only": false, "value": "2026-10-11T06:00:12.413Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-84252", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-11T06:00:12.413Z", "date_only": false, "value": "2026-10-11T06:00:12.413Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "cve-2026-84252", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T06:38:52.177Z", "date_only": false, "value": "2026-10-11T06:38:52.177616Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117420898905706629", "record": "CVE-2026-84252", "field": "creation_timestamp", "uuid": "17fad927-4565-41f0-bfce-e549bae83af3", "content": "CVE-2026-84252 click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to WPForms WordPress plugin through 1.0.3. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.\nhttps://www.cve.org/CVERecord?id=CVE-2026-84252https://wpscan.com/vulnerability/ab64adf8-a07e-491b-9a47-d195e0e543c3/#CVE_2026_84252#bot", "url": "https://infosec.exchange/users/cve/statuses/117420898905706629"}, {"timestamp": "2026-10-11T07:17:24Z", "date_only": false, "value": "2026-10-11T07:17:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GHX5-HM5V-JFCH", "record": "GHSA-GHX5-HM5V-JFCH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-11T07:17:24.943Z", "date_only": false, "value": "2026-10-11T07:17:24.943", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84252", "record": "FKIE_CVE-2026-84252", "field": "published"}, {"timestamp": "2026-10-11T09:30:24Z", "date_only": false, "value": "2026-10-11T09:30:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GHX5-HM5V-JFCH", "record": "GHSA-GHX5-HM5V-JFCH", "field": "published"}, {"timestamp": "2026-10-11T11:26:25.389Z", "date_only": false, "value": "2026-10-11T11:26:25.389167Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-84252", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-11T11:26:25.389Z", "date_only": false, "value": "2026-10-11T11:26:25.389167Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84252", "record": "FKIE_CVE-2026-84252", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-11T11:32:45.581Z", "date_only": false, "value": "2026-10-11T11:32:45.581Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-84252", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-11T11:32:45.581Z", "date_only": false, "value": "2026-10-11T11:32:45.581Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-84252", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T12:20:05.821Z", "date_only": false, "value": "2026-10-11T12:20:05.821000Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlygzjv4o2w", "record": "CVE-2026-84252", "field": "creation_timestamp", "uuid": "2be137b9-f332-4d34-a108-736a26f43b61", "content": "CVE-2026-84252 - click5 crm add-on to wpforms\nThe click5 CRM add-on for WPForms (versions up to 1.0.3) lets anyone on the internet change any setting in your WordPress site because it lacks proper checks. This can be\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlygzjv4o2w"}, {"timestamp": "2026-10-11T12:31:07Z", "date_only": false, "value": "2026-10-11T12:31:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GHX5-HM5V-JFCH", "record": "GHSA-GHX5-HM5V-JFCH", "field": "modified"}, {"timestamp": "2026-10-13T20:36:00.850Z", "date_only": false, "value": "2026-10-13T20:36:00.850", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84252", "record": "FKIE_CVE-2026-84252", "field": "lastModified"}]}