{"uuid": "6e5fea4b-3902-43f8-aa93-9fca8f5b031f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15667", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117238846309001976", "content": "CVE-2026-15667: HIGH-severity LFI in Eventin WordPress plugin (\u22644.1.22). Contributors can include arbitrary PHP via 'event_layout', risking code execution. Restrict privileges & await patch. https://radar.offseq.com/threat/cve-2026-15667-cwe-98-improper-control-of-filename-for-includerequire-statement-in-php-program-php-b89bc3860052e068 #OffSeq #WordPress #Vuln #LFI", "creation_timestamp": "2026-09-09T03:00:29.746196Z"}