{"uuid": "6ce5d8f0-5fb4-443e-bd52-cff224190e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15667", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2kaud5lu2b", "content": "Eventin WordPress plugin (\u22644.1.22) faces HIGH-severity LFI (CVE-2026-15667). Contributors can execute PHP via REST API. Restrict privileges & monitor for a patch. https://radar.offseq.com/threat/cve-2026-15667-cwe-98-improper-control-of-filename-for-includerequire-statement-in-php-program-php-b89...", "creation_timestamp": "2026-09-09T03:00:28.692889Z"}