{"metadata": {"vulnerability": "cve-2026-92965", "count": 14, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-17T13:04:15.928Z", "date_only": false, "value": "2026-09-17T13:04:15.928Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-92965", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-20T06:00:18.907Z", "date_only": false, "value": "2026-09-20T06:00:18.907Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-92965", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-20T06:00:18.907Z", "date_only": false, "value": "2026-09-20T06:00:18.907Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "cve-2026-92965", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-20T07:16:51Z", "date_only": false, "value": "2026-09-20T07:16:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-774V-J88V-3M84", "record": "GHSA-774V-J88V-3M84", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-20T07:16:51.453Z", "date_only": false, "value": "2026-09-20T07:16:51.453", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92965", "record": "FKIE_CVE-2026-92965", "field": "published"}, {"timestamp": "2026-09-20T09:30:21Z", "date_only": false, "value": "2026-09-20T09:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-774V-J88V-3M84", "record": "GHSA-774V-J88V-3M84", "field": "published"}, {"timestamp": "2026-09-20T10:30:25.352Z", "date_only": false, "value": "2026-09-20T10:30:25.352310Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117302901104499285", "record": "cve-2026-92965", "field": "creation_timestamp", "uuid": "7e0dc7b7-d8b0-45c6-80a5-929c3452420f", "content": "HIGH severity: CVE-2026-92965 in TikTok WordPress plugin (1.2.0 \u2013 1.4.2) allows any visitor to redeem sign-in codes via URL, risking ad platform abuse. Restrict or disable the plugin while awaiting a patch. https://radar.offseq.com/threat/cve-2026-92965-cwe-862-missing-authorization-in-tiktok-38fbb3b8076a5adb #OffSeq #WordPress #Vuln #Security", "url": "https://infosec.exchange/users/offseq/statuses/117302901104499285"}, {"timestamp": "2026-09-20T10:30:28.077Z", "date_only": false, "value": "2026-09-20T10:30:28.077288Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvwyjmech72b", "record": "cve-2026-92965", "field": "creation_timestamp", "uuid": "81c7a6a8-0216-4a36-ade6-6f01940dde94", "content": "TikTok WordPress plugin (v1.2.0 \u2013 1.4.2) hit by HIGH severity auth flaw. Any visitor can redeem sign-in codes via URL \u2014 protect your site by disabling or restricting the plugin until fixed. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-92965-cwe-862-missing-authorization-in-tiktok-38fbb3b8076a5adb #...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvwyjmech72b"}, {"timestamp": "2026-09-20T13:52:27.528Z", "date_only": false, "value": "2026-09-20T13:52:27.528224Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-92965", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-09-20T13:52:27.528Z", "date_only": false, "value": "2026-09-20T13:52:27.528224Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92965", "record": "FKIE_CVE-2026-92965", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-20T13:52:30.807Z", "date_only": false, "value": "2026-09-20T13:52:30.807Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-92965", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-20T13:52:30.807Z", "date_only": false, "value": "2026-09-20T13:52:30.807Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-92965", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-20T15:30:23Z", "date_only": false, "value": "2026-09-20T15:30:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-774V-J88V-3M84", "record": "GHSA-774V-J88V-3M84", "field": "modified"}, {"timestamp": "2026-09-22T19:41:38.447Z", "date_only": false, "value": "2026-09-22T19:41:38.447", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92965", "record": "FKIE_CVE-2026-92965", "field": "lastModified"}]}
