{"uuid": "d768f01c-e349-4c78-befc-a73c81ced970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81655", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwils2melc2q", "content": "Ad Inserter plugin (WP, 2.8.12 \u2013 2.8.18) hit by CRITICAL code injection. Subscriber users can run PHP or serve XSS. Upgrade to 2.8.19+ now. https://radar.offseq.com/threat/cve-2026-81655-cwe-94-improper-control-of-generation-of-code-code-injection-in-ad-inserter-d330f89b1f759aca #OffSeq #WordPres...", "creation_timestamp": "2026-09-27T10:30:27.249962Z"}